PCNSA · Question #341
By default, which action is assigned to the intrazone-default rule?
The correct answer is D. Allow. The intrazone-default rule, by default, permits all traffic within the same security zone.
Question
By default, which action is assigned to the intrazone-default rule?
Options
- AReset-client
- BReset-server
- CDeny
- DAllow
How the community answered
(52 responses)- A8% (4)
- B2% (1)
- C4% (2)
- D87% (45)
Why each option
The intrazone-default rule, by default, permits all traffic within the same security zone.
Reset-client is an action that resets the client-side connection but is not the default action for intrazone traffic.
Reset-server is an action that resets the server-side connection but is not the default action for intrazone traffic.
Deny is the default action for the interzone-default rule (traffic between zones), not the intrazone-default rule.
The intrazone-default rule is a predefined security policy rule that permits all traffic flow between interfaces or subinterfaces residing in the same security zone. This default Allow action ensures that internal traffic within a zone is not blocked without explicit policy configuration.
Concept tested: Default security policy rules (intrazone)
Source: https://docs.paloaltonetworks.com/pan-os/10-2/pan-os-admin/policy/security-policy/security-policy-rules.html
Topics
Community Discussion
No community discussion yet for this question.