nerdexam
Palo_Alto_Networks

PCNSA · Question #219

An address object of type IP Wildcard Mask can be referenced in which part of the configuration?

The correct answer is A. Security policy rule. You can use an address object of type IP Wildcard Mask only in a Security policy rule. https://docs.paloaltonetworks.com/pan-os/9-0/pan-os-web-interface-help/objects/objects- addresses IP Wildcard Mask --Enter an IP wildcard address in the format of an IPv4 address followed by…

Submitted by miguelv· Apr 18, 2026Policy Evaluation and Management

Question

An address object of type IP Wildcard Mask can be referenced in which part of the configuration?

Options

  • ASecurity policy rule
  • BACC global filter
  • Cexternal dynamic list
  • DNAT address pool

How the community answered

(48 responses)
  • A
    96% (46)
  • C
    2% (1)
  • D
    2% (1)

Explanation

You can use an address object of type IP Wildcard Mask only in a Security policy rule. https://docs.paloaltonetworks.com/pan-os/9-0/pan-os-web-interface-help/objects/objects- addresses IP Wildcard Mask --Enter an IP wildcard address in the format of an IPv4 address followed by a slash and a mask (which must begin with a zero); for example, 10.182.1.1/0.127.248.0. In the wildcard mask, a zero (0) bit indicates that the bit being compared must match the bit in the IP address that is covered by the 0. A one (1) bit in the mask is a wildcard bit, meaning the bit being compared need not match the bit in the IP address that is covered by the 1. Convert the IP address and the wildcard mask to binary. To illustrate the matching: on binary snippet 0011, a wildcard mask of 1010 results in four matches (0001, 0011, 1001, and 1011).

Topics

#Address Objects#Wildcard Masks#Security Policies

Community Discussion

No community discussion yet for this question.

Full PCNSA Practice