Palo_Alto_Networks

PCNSA · Question #393

What does rule shadowing in Security policies do?

The correct answer is B. It indicates that a broader rule matching the criteria is configured above a more specific rule. https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClVXCA0 A shadow rule warning generally indicates a more broad rule matching the criteria is configured above a more specific rule.

Submitted by ahmad_uae· Apr 18, 2026Policy Evaluation and Management

Question

What does rule shadowing in Security policies do?

Options

AIt shows rules with the same Source Zones and Destination Zones.
BIt indicates that a broader rule matching the criteria is configured above a more specific rule.
CIt indicates rules with App-ID that are not configured as port-based.
DIt shows rules that are missing Security profile configurations.

How the community answered

(19 responses)

B
95% (18)
C
5% (1)

Explanation

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClVXCA0 A shadow rule warning generally indicates a more broad rule matching the criteria is configured above a more specific rule.

Topics

#Security Policy#Rule Shadowing#Policy Evaluation

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion

Full PCNSA Practice