exam questions

Exam PCNSE All Questions

View all questions & answers for the PCNSE exam

Exam PCNSE topic 1 question 273 discussion

Actual exam question from Palo Alto Networks's PCNSE
Question #: 273
Topic #: 1
[All PCNSE Questions]

An administrator is building Security rules within a device group to block traffic to and from malicious locations. How should those rules be configured to ensure that they are evaluated with a high priority?

  • A. Create the appropriate rules with a Block action and apply them at the top of the local firewall Security rules
  • B. Create the appropriate rules with a Block action and apply them at the top of the Security Pre-Rules
  • C. Create the appropriate rules with a Block action and apply them at the top of the Security Post-Rules
  • D. Create the appropriate rules with a Block action and apply them at the top of the Default Rules
Show Suggested Answer Hide Answer
Suggested Answer: B 🗳️

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Sammy3637
11 months ago
Selected Answer: B
Pre Rules come first always !
upvoted 1 times
...
confusion
2 years ago
Selected Answer: B
B, rule evaluation order is: Pre/Local/Post/Default
upvoted 1 times
...
TAKUM1y
2 years ago
Selected Answer: B
https://docs.paloaltonetworks.com/pan-os/10-2/pan-os-web-interface-help/panorama-web-interface/defining-policies-on-panorama
upvoted 2 times
...
mysteryzjoker
2 years ago
B - pre rules are evaluated first, then local, then post and the default rules are at the bottom
upvoted 2 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago