PCNSA · Question #156
Which two rule types allow the administrator to modify the destination zone? (Choose two.)
The correct answer is A. interzone D. universal. In Palo Alto Networks policy, the destination zone field can be changed only in rule types where source and destination zones can differ: Universal rules match both interzone and intrazone traffic and allow any source/destination zone combination to be specified. Interzone…
Question
Which two rule types allow the administrator to modify the destination zone? (Choose two.)
Options
- Ainterzone
- Bshadowed
- Cintrazone
- Duniversal
How the community answered
(32 responses)- A88% (28)
- B3% (1)
- C9% (3)
Explanation
In Palo Alto Networks policy, the destination zone field can be changed only in rule types where source and destination zones can differ: Universal rules match both interzone and intrazone traffic and allow any source/destination zone combination to be specified. Interzone rules explicitly match traffic between different zones and also allow the destination zone to be defined. Intrazone rules, by definition, match traffic where source and destination zones are the same - the destination zone is implicitly locked to the source zone and cannot be independently modified. 'Shadowed' is not a configurable rule type; it is a policy audit status indicating a rule is hidden by a preceding rule.
Topics
Community Discussion
No community discussion yet for this question.