Which rule type is appropriate for matching traffic both within and between the source and destination zones?

The correct answer is D. universal. Palo Alto Networks Security policy rules have three type options. 'Intrazone' matches only traffic where source and destination are in the same zone. 'Interzone' matches only traffic flowing between different zones. 'Universal' (D) matches both intrazone and interzone traffic…

Submitted by kwame.gh· Apr 18, 2026Securing Traffic

Question

Options

Ainterzone
Bshadowed
Cintrazone
Duniversal

How the community answered

(23 responses)

A
4% (1)
C
9% (2)
D
87% (20)

Explanation

Palo Alto Networks Security policy rules have three type options. 'Intrazone' matches only traffic where source and destination are in the same zone. 'Interzone' matches only traffic flowing between different zones. 'Universal' (D) matches both intrazone and interzone traffic, making it the most flexible type and the default when no type is specified. 'Shadowed' (B) is not a rule type - it is a status indicator meaning another rule earlier in the policy already covers the same traffic, so the shadowed rule can never be hit.

Topics

#Security Policy#Rule Types#Universal Rules#Traffic Zones

Community Discussion

No community discussion yet for this question.

Full PCNSA Practice