Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
Palo Alto Networks Certified Network Security Administrator (PCNSA) · Palo Alto Networks
Select one answer.
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
D is correct, why? Interzone default applies here; it is a predefined security rule in Palo Alto Networks firewalls that block all traffic between different zones. It is displayed at the bottom of the security rule base and can be overridden by a user-defined rule. The interzone-default rule has a deny action and applies to any traffic that does not match any other rule in the rule list.
The default Rule
D is correct. Remember Security Policies are a match condition, and then action is applied to the matching traffic.