nerdexam
Palo_Alto_Networks

PCNSA · Question #420

Which feature enables an administrator to review the Security policy rule base for unused rules?

The correct answer is B. Policy Optimizer. Policy Optimizer provides a simple workflow to migrate your legacy Security policy rulebase to an App-ID based rulebase, which improves your security by reducing the attack surface and gaining visibility into applications so you can safely enable them. Policy Optimizer can also…

Submitted by mateo_ar· Apr 18, 2026Policy Evaluation and Management

Question

Which feature enables an administrator to review the Security policy rule base for unused rules?

Options

  • ATest Policy Match
  • BPolicy Optimizer
  • CView Rulebase as Groups
  • DSecurity policy tags eb

How the community answered

(16 responses)
  • A
    6% (1)
  • B
    88% (14)
  • C
    6% (1)

Explanation

Policy Optimizer provides a simple workflow to migrate your legacy Security policy rulebase to an App-ID based rulebase, which improves your security by reducing the attack surface and gaining visibility into applications so you can safely enable them. Policy Optimizer can also identify unused rules, duplicate rules, and rules that can be merged or reordered to optimize your rulebase. You can use Policy Optimizer to review the usage statistics of your rules and take actions to clean up or modify your rulebase as needed.

Topics

#Policy Optimizer#Security Policy#Rule Base Optimization#Unused Rules

Community Discussion

No community discussion yet for this question.

Full PCNSA Practice