PCNSA Question 40

Community Discussion

Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.

• 1

  BCE: Security Profiles are attached to Security Rules. B is in contradiction with A, so they cannot be both true. D is surely false because Security Policies can Block (Deny) traffic.

• 1

  BDE. B. Security Profiles are attached to Security policy rules. Security policies define how traffic is handled, and security profiles provide additional security measures like antivirus scanning or URL filtering. You can attach security profiles to security policies to extend their functionality. D. Security policy rules inspect but do not block traffic. Security policy rules can perform inspections on traffic based on various criteria (source, destination, application, etc.). Based on the match criteria and the defined action (allow or deny), they can either permit or block traffic flow. E. Security policy rules can block or allow traffic. This is the core functionality of security policies. They evaluate traffic against defined criteria and dictate whether to permit or deny its passage through the firewall. C. Security Profiles should be used only on allowed traffic. Security profiles can be applied to both allowed and denied traffic. For example, you might want to perform antivirus scanning on all traffic, even traffic that is ultimately blocked by the security policy.

• Chose BCE1

  Security policy cannot be attached to security profile but it is other way around. Block traffic need not to have security profile. Hence ans is B C and E