PCNSA · Question #227
An administrator is reviewing the Security policy rules shown in the screenshot below. Which statement is correct about the information displayed?
The correct answer is B. The view Rulebase as Groups is checked. Without the screenshot, it's impossible to confirm specific rule counts or tag usage; however, if the security policies are displayed in a structured, hierarchical manner, it indicates the 'View Rulebase as Groups' option is enabled.
Question
An administrator is reviewing the Security policy rules shown in the screenshot below. Which statement is correct about the information displayed?
Exhibit
Options
- AEleven rules use the "Infrastructure* tag.
- BThe view Rulebase as Groups is checked.
- CThere are seven Security policy rules on this firewall.
- DHighlight Unused Rules is checked.
How the community answered
(63 responses)- A3% (2)
- B90% (57)
- C2% (1)
- D5% (3)
Why each option
Without the screenshot, it's impossible to confirm specific rule counts or tag usage; however, if the security policies are displayed in a structured, hierarchical manner, it indicates the 'View Rulebase as Groups' option is enabled.
The number of rules using a specific tag cannot be determined without analyzing the rule details in the screenshot.
The 'View Rulebase as Groups' option organizes Security policy rules into logical sections (e.g., Pre-Rulebase, Post-Rulebase, or custom groups), which is a distinct visual presentation compared to a flat rule list.
The total count of Security policy rules cannot be accurately ascertained without seeing the entire list or a rule counter in the screenshot.
The 'Highlight Unused Rules' feature displays rules with specific visual cues, which cannot be confirmed without the specific visual representation in the screenshot.
Concept tested: Security policy rulebase UI features
Source: https://docs.paloaltonetworks.com/pan-os/10-2/pan-os-admin/policy/security-policy/security-policy-rules#id2d21a8eb-8438-4061-8ff8-0b298418f731
Topics
Community Discussion
No community discussion yet for this question.
