Practice · Network Security Analyst

~/paloalto-pcnsa · paloalto-pcnsa_d1_6d3e92d1d58f ▊

← Network Security Analyst · practice sheet

paloalto-pcnsa_d1_6d3e92d1d58f domain/d1 · medium single

A security analyst is defining Access Control Lists for each firewall zone. After entering the specific allow and deny rules based on source and destination addresses and ports, which rule should be configured as the final rule in the list?

A A default allow rule for all undefined traffic to prevent legitimate connections from being dropped
B A default deny rule for all undefined traffic
C A monitor-only rule that logs undefined traffic but permits it
D A rule that redirects undefined traffic to the DMZ for inspection

Unlock this exam to join the per-question discussion and vote on questions.

next question →