NETSEC-PRO · Question #58
A network security engineer has created a Security policy in Prisma Access that includes a negated region in the source address. Which configuration will ensure there is no connectivity loss due to…
The correct answer is B. Create a Security policy for the negated region with destination address "any". Negated source addresses exclude traffic from the specified region. To avoid accidental connectivity loss for traffic from that region, create a separate Security policy to explicitly permit it. When you use a negated region in a Security policy rule, ensure to create an…
Question
A network security engineer has created a Security policy in Prisma Access that includes a negated region in the source address. Which configuration will ensure there is no connectivity loss due to the negated region?
Options
- ASet the service to be application-default.
- BCreate a Security policy for the negated region with destination address "any".
- CAdd a Dynamic Application Group to the Security policy.
- DAdd all regions that contain private IP addresses to the source address.
How the community answered
(23 responses)- A4% (1)
- B78% (18)
- C4% (1)
- D13% (3)
Explanation
Negated source addresses exclude traffic from the specified region. To avoid accidental connectivity loss for traffic from that region, create a separate Security policy to explicitly permit it. When you use a negated region in a Security policy rule, ensure to create an additional Security policy to permit traffic from the excluded (negated) region to avoid unintentional drops.
Topics
Community Discussion
No community discussion yet for this question.