PCNSA · Question #311
If a universal security rule was created for source zones A & B and destination zones A & B, to which traffic would the rule apply?
The correct answer is C. All traffic within zones A & B. A universal security rule configured with both zones A and B as source and destination zones will apply to all possible traffic flows where the source is in A or B, and the destination is in A or B.
Question
If a universal security rule was created for source zones A & B and destination zones A & B, to which traffic would the rule apply?
Options
- ASome traffic between A & B
- BSome traffic within A
- CAll traffic within zones A & B
- DSome traffic within B
How the community answered
(34 responses)- B6% (2)
- C91% (31)
- D3% (1)
Why each option
A universal security rule configured with both zones A and B as source and destination zones will apply to all possible traffic flows where the source is in A or B, and the destination is in A or B.
'Some traffic between A & B' is too restrictive; the rule covers all traffic between A and B, plus all traffic within A and all traffic within B.
'Some traffic within A' is too restrictive; the rule covers all traffic within A, all traffic within B, and all traffic between A and B.
Specifying zones A and B as both source and destination for a universal rule creates a comprehensive scope, encompassing all traffic originating from within A or B, and destined for within A or B, which includes intrazone traffic (A to A, B to B) and interzone traffic (A to B, B to A).
'Some traffic within B' is too restrictive; the rule covers all traffic within B, all traffic within A, and all traffic between A and B.
Concept tested: Universal security rule scope
Source: https://docs.paloaltonetworks.com/pan-os/10-2/pan-os-admin/policy/security-policy/security-policy-rule-types.html
Topics
Community Discussion
No community discussion yet for this question.