nerdexam
Palo_Alto_Networks

PCNSA · Question #341

By default, which action is assigned to the intrazone-default rule?

The correct answer is D. Allow. The intrazone-default rule, by default, permits all traffic within the same security zone.

Submitted by olafpl· Apr 18, 2026Securing Traffic

Question

By default, which action is assigned to the intrazone-default rule?

Options

  • AReset-client
  • BReset-server
  • CDeny
  • DAllow

How the community answered

(52 responses)
  • A
    8% (4)
  • B
    2% (1)
  • C
    4% (2)
  • D
    87% (45)

Why each option

The intrazone-default rule, by default, permits all traffic within the same security zone.

AReset-client

Reset-client is an action that resets the client-side connection but is not the default action for intrazone traffic.

BReset-server

Reset-server is an action that resets the server-side connection but is not the default action for intrazone traffic.

CDeny

Deny is the default action for the interzone-default rule (traffic between zones), not the intrazone-default rule.

DAllowCorrect

The intrazone-default rule is a predefined security policy rule that permits all traffic flow between interfaces or subinterfaces residing in the same security zone. This default Allow action ensures that internal traffic within a zone is not blocked without explicit policy configuration.

Concept tested: Default security policy rules (intrazone)

Source: https://docs.paloaltonetworks.com/pan-os/10-2/pan-os-admin/policy/security-policy/security-policy-rules.html

Topics

#intrazone-default rule#default security policy#firewall policy#security zones

Community Discussion

No community discussion yet for this question.

Full PCNSA Practice