exam questions

Exam PCNSE All Questions

View all questions & answers for the PCNSE exam

Exam PCNSE topic 1 question 330 discussion

Actual exam question from Palo Alto Networks's PCNSE
Question #: 330
Topic #: 1
[All PCNSE Questions]

A firewall has Security policies from three sources:
1. locally created policies
2. shared device group policies as pre-rules
3. the firewall's device group as post-rules
How will the rule order populate once pushed to the firewall?

  • A. shared device group policies, local policies, firewall device group policies
  • B. firewall device group policies, local policies, shared device group policies
  • C. local policies, firewall device group policies, shared device group policies
  • D. shared device group policies, firewall device group policies, local policies
Show Suggested Answer Hide Answer
Suggested Answer: A 🗳️

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
mysteryzjoker
Highly Voted 2 years, 8 months ago
A, not D. Post rules are applied after local policies.
upvoted 8 times
...
lol12
Highly Voted 2 years, 4 months ago
Selected Answer: A
A Tricky wording. Just focus on Pre/Local/Post
upvoted 5 times
...
CarlosDV06
Most Recent 3 months, 3 weeks ago
Selected Answer: A
Imagine Panorama prepares a sandwich, so you have shared pre rules and post rules as bread, child defined pre and post rules as the veggies, and the meat is the local fw policy ruleset. So, with that in mind, it'd be: Shared pre rules (bread), local firewall rules (meat), because you don't have fw device group pre rules, and fw dg post rules (veggies upper the bottom bread). Lmao I hope you find this useful folks
upvoted 1 times
...
ALCOSTA35
5 months, 3 weeks ago
Selected Answer: A
The correct order is Pre, Local, and Post, by definition!
upvoted 1 times
...
ATRRHMN
10 months, 1 week ago
Selected Answer: A
https://docs.paloaltonetworks.com/pan-os/9-1/pan-os-web-interface-help/panorama-web-interface/defining-policies-on-panorama
upvoted 1 times
...
428cd48
1 year, 1 month ago
Palo creates tests for you to fail, all other vendors for you to learn and pass
upvoted 2 times
...
avator
1 year, 3 months ago
the pre-rule and the post-rule are mentioned in the question not on the answers we need to map it with the listed choice so A is the correct answer.
upvoted 1 times
...
hifumi_daisuki
1 year, 4 months ago
Selected Answer: A
Shared Pre-Rules Device Group Pre-Rules Local Firewall Rules Device Group Post Rule Shared Post-Rules Default Rules https://docs.paloaltonetworks.com/panorama/11-1/panorama-admin/panorama-overview/centralized-firewall-configuration-and-update-management/device-groups/device-group-policies
upvoted 3 times
...
DenskyDen
2 years, 4 months ago
A. 1 million percent!
upvoted 1 times
...
Sarbi
2 years, 4 months ago
A is correct
upvoted 2 times
...
confusion
2 years, 6 months ago
Selected Answer: A
A Shared-Local-Post
upvoted 1 times
...
TAKUM1y
2 years, 6 months ago
Selected Answer: A
https://docs.paloaltonetworks.com/panorama/10-2/panorama-admin/manage-firewalls/manage-device-groups/manage-the-rule-hierarchy
upvoted 3 times
...
guilhermeandrade
2 years, 6 months ago
A. because the 3 option is post-rule
upvoted 2 times
...
nose999
2 years, 8 months ago
Sorry A is correct
upvoted 1 times
...
nose999
2 years, 8 months ago
Selected Answer: D
https://docs.paloaltonetworks.com/panorama/9-1/panorama-admin/panorama-overview/centralized-firewall-configuration-and-update-management/device-groups/device-group-policies
upvoted 1 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago