Exam PCNSE topic 1 question 443 discussion

Actual exam question from Palo Alto Networks's PCNSE

Question #: 443
Topic #: 1

A network security engineer needs to enable Zone Protection in an environment that makes use of Cisco TrustSec Layer 2 protections.

What should the engineer configure within a Zone Protection profile to ensure that the TrustSec packets are identified and actions are taken upon them?

A. Stream ID in the IP Option Drop options
B. Record Route in IP Option Drop options
C. Ethernet SGT Protection
D. TCP Fast Open in the Strip TCP options

Show Suggested Answer

Suggested Answer: C 🗳️

by chrisy042 at Nov. 25, 2022, 9:15 p.m.

Comments

Submit Cancel

chrisy042

Highly Voted 2 years, 1 month ago

Selected Answer: C

https://docs.paloaltonetworks.com/pan-os/10-1/pan-os-admin/zone-protection-and-dos-protection/zone-defense/zone-protection-profiles/ethernet-sgt-protection

upvoted 6 times

...

Marshpillowz

Most Recent 11 months, 2 weeks ago

Selected Answer: C

C is correct

upvoted 1 times

...

brian7857ffs45

1 year, 1 month ago

This question was on the exam.. Nov 2023

upvoted 2 times

Shaun919

1 year, 1 month ago

Were all these questions on the exam? I have it on the 16th, but may move it up to the 8th.

upvoted 1 times

...

GohanF2

1 year, 11 months ago

It's C. Cisco reference: https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/sec_usr_cts/configuration/xe-16/sec-usr-cts-xe-16-book/sec-usr-cts-xe-16-book_chapter_01101.html

upvoted 1 times

...

mz101

2 years, 1 month ago

Yes, should be C.

upvoted 3 times

...