Which component is a building block in a Security policy rule?

The correct answer is D. application. The six core match criteria (building blocks) of a Palo Alto Networks Security policy rule are: source zone, destination zone, source address, destination address, application, and service/URL category. 'Application' is explicitly one of these fundamental components and is…

Submitted by minji_kr· Apr 18, 2026Policy Evaluation and Management

Question

Options

Adecryption profile
Bdestination interface
Ctimeout (min)
Dapplication

How the community answered

(38 responses)

A
3% (1)
B
3% (1)
D
95% (36)

Explanation

The six core match criteria (building blocks) of a Palo Alto Networks Security policy rule are: source zone, destination zone, source address, destination address, application, and service/URL category. 'Application' is explicitly one of these fundamental components and is central to the App-ID-driven model. A decryption profile is attached to a Decryption policy rule, not a Security policy rule. Destination interface is not a match condition - only zones and addresses are. Timeout is a session characteristic found in application definitions, not a field in the Security policy rule itself.

Topics

#Security Policy#Policy Rule#Application

Community Discussion

No community discussion yet for this question.

Full PCNSA Practice