exam questions

Exam PCNSA All Questions

View all questions & answers for the PCNSA exam

Exam PCNSA topic 1 question 259 discussion

Actual exam question from Palo Alto Networks's PCNSA
Question #: 259
Topic #: 1
[All PCNSA Questions]

An administrator would like to see the traffic that matches the intrazone-default rule in the traffic logs.

What is the correct process to enable this logging?

  • A. Select the intrazone-default rule and click Override; on the Actions tab, select Log at Session End and click OK.
  • B. Select the intrazone-default rule and edit the rule; on the Actions tab, select Log at Session End and click OK.
  • C. Select the intrazone-default rule and edit the rule; on the Actions tab, select Log at Session Start and click OK.
  • D. This rule has traffic logging enabled by default; no further action is required.
Show Suggested Answer Hide Answer
Suggested Answer: A 🗳️

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
alphahotelzulu
9 months, 3 weeks ago
Selected Answer: A
A is correct
upvoted 1 times
...
J2J2J2J
1 year, 3 months ago
Selected Answer: A
Answer : A For traffic that doesn’t match any user-defined rules, the default rules apply. The default rules—displayed at the bottom of the security rulebase—are predefined to allow all intrazone traffic (within the zone) and deny all interzone traffic (between zones). Although these rules are part of the pre-defined configuration and are read-only by default, you can Override them and change a limited number of settings, including the tags, action (allow or deny), log settings, and security profiles.
upvoted 4 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago