Palo_Alto_Networks
PCNSA · Question #221
An administrator needs to create a Security policy rule that matches DNS traffic within the LAN zone, and also needs to match DNS traffic within the DMZ zone. The administrator does not want to allow
Sign in or unlock PCNSA to reveal the answer and full explanation for question #221. The question stem and answer options stay visible for context.
Submitted by mateo_ar· Apr 18, 2026Policy Evaluation and Management
Question
An administrator needs to create a Security policy rule that matches DNS traffic within the LAN zone, and also needs to match DNS traffic within the DMZ zone. The administrator does not want to allow traffic between the DMZ and LAN zones. Which Security policy rule type should they use?
Options
- Adefault
- Buniversal
- Cintrazone
- Dinterzone
Unlock PCNSA to see the answer
You've previewed enough free PCNSA questions. Unlock PCNSA for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.
Topics
#Security Policy#Rule Types#Intrazone#Zones