Practice · XSOAR Engineer

~/paloalto-xsoar-engineer · paloalto-xsoar-engineer_d1_6ce6b22904cc ▊

paloalto-xsoar-engineer_d1_6ce6b22904cc domain/d1 · medium single

An engineer discovers that a specific deny rule for IP 192.168.1.50 on port 80 is never taking effect because a broader allow rule for the 192.168.1.0/24 subnet precedes it. What is the correct maintenance action to resolve this shadow anomaly?

A Delete the broad allow rule for the entire subnet
B Place the specific deny rule before the general allow rule
C Combine both rules into a single stateful rule
D Change the deny rule to allow traffic and add logging

Unlock this exam to join the per-question discussion and vote on questions.

next question →