nerdexam
Palo_Alto_Networks

PCNSA · Question #196

An administrator is troubleshooting an issue with traffic that matches the intrazone-default rule, which is set to default configuration. What should the administrator do?

The correct answer is A. change the logging action on the rule. The administrator should change the logging action on the intrazone-default rule to enable visibility for troubleshooting, as by default this rule permits traffic without logging it.

Submitted by fernanda_arg· Apr 18, 2026Policy Evaluation and Management

Question

An administrator is troubleshooting an issue with traffic that matches the intrazone-default rule, which is set to default configuration. What should the administrator do?

Options

  • Achange the logging action on the rule
  • Breview the System Log
  • Crefresh the Traffic Log
  • Dtune your Traffic Log filter to include the dates

How the community answered

(16 responses)
  • A
    81% (13)
  • B
    6% (1)
  • C
    13% (2)

Why each option

The administrator should change the logging action on the intrazone-default rule to enable visibility for troubleshooting, as by default this rule permits traffic without logging it.

Achange the logging action on the ruleCorrect

The intrazone-default rule, in its default configuration, allows traffic without logging it; therefore, to troubleshoot traffic matching this rule, the administrator must modify the rule's logging action to enable logging. This will then allow the traffic to appear in the traffic logs for review.

Breview the System Log

Reviewing the System Log is incorrect because system logs record device-specific events, not traffic flow matching security policy rules.

Crefresh the Traffic Log

Refreshing the Traffic Log will only update the display of already logged traffic and will not cause traffic that was never logged to appear.

Dtune your Traffic Log filter to include the dates

Tuning a Traffic Log filter only refines the view of existing logs and cannot enable logging for traffic that was not configured to be logged.

Concept tested: Intrazone-default rule logging

Source: https://docs.paloaltonetworks.com/pan-os/10-2/pan-os-admin/security-policy/security-policy-rules/intra-zone-default-rule

Topics

#Troubleshooting#Security Policy#Logging#Intrazone Traffic

Community Discussion

No community discussion yet for this question.

Full PCNSA Practice