NGFW-ENGINEER · Question #109
What is a valid configurable limit for setting resource quotas when defining a new VSYS on a Palo Alto Networks firewall?
The correct answer is B. Maximum number of SSL decryption rules. When creating or editing a virtual system (VSYS) on a Palo Alto Networks firewall, administrators can set resource quotas that cap the number of policy rules of specific types allowed within that VSYS. The maximum number of SSL decryption rules (B) is a valid resource quota…
Question
What is a valid configurable limit for setting resource quotas when defining a new VSYS on a Palo Alto Networks firewall?
Options
- APercentage of total CPU utilization
- BMaximum number of SSL decryption rules
- CMaximum number of virtual routers
- DDisk space allocation for logs
How the community answered
(48 responses)- A4% (2)
- B92% (44)
- C2% (1)
- D2% (1)
Explanation
When creating or editing a virtual system (VSYS) on a Palo Alto Networks firewall, administrators can set resource quotas that cap the number of policy rules of specific types allowed within that VSYS. The maximum number of SSL decryption rules (B) is a valid resource quota that can be set per VSYS, preventing any single VSYS from consuming all available policy rule slots. CPU utilization percentage (A) is not a per-VSYS configurable quota - CPU is managed at the platform level. Virtual routers (C) are shared platform resources and are not quota-limited per VSYS in this manner. Disk space allocation for logs (D) is managed through log storage quotas at a different configuration level, not through the VSYS resource quota settings.
Topics
Community Discussion
No community discussion yet for this question.