nerdexam
Palo_Alto_Networks

NETSEC-ANALYST · Question #219

An address object of type IP Wildcard Mask can be referenced in which part of the configuration?

The correct answer is A. Security policy rule. You can use an address object of type IP Wildcard Mask only in a Security policy rule. https://docs.paloaltonetworks.com/pan-os/9-0/pan-os-web-interface-help/objects/objects- addresses IP Wildcard Mask --Enter an IP wildcard address in the format of an IPv4 address followed by…

Policy and Object Management

Question

An address object of type IP Wildcard Mask can be referenced in which part of the configuration?

Options

  • ASecurity policy rule
  • BACC global filter
  • Cexternal dynamic list
  • DNAT address pool

How the community answered

(30 responses)
  • A
    73% (22)
  • B
    3% (1)
  • C
    7% (2)
  • D
    17% (5)

Explanation

You can use an address object of type IP Wildcard Mask only in a Security policy rule. https://docs.paloaltonetworks.com/pan-os/9-0/pan-os-web-interface-help/objects/objects- addresses IP Wildcard Mask --Enter an IP wildcard address in the format of an IPv4 address followed by a slash and a mask (which must begin with a zero); for example, 10.182.1.1/0.127.248.0. In the wildcard mask, a zero (0) bit indicates that the bit being compared must match the bit in the IP address that is covered by the 0. A one (1) bit in the mask is a wildcard bit, meaning the bit being compared need not match the bit in the IP address that is covered by the 1. Convert the IP address and the wildcard mask to binary. To illustrate the matching: on binary snippet 0011, a wildcard mask of 1010 results in four matches (0001, 0011, 1001, and 1011).

Topics

#IP Wildcard Mask#address objects#Security policy reference#object types

Community Discussion

No community discussion yet for this question.

Full NETSEC-ANALYST Practice