nerdexam
Palo_Alto_Networks

PCNSA · Question #433

Which feature enables an administrator to review the Security policy rule base for unused rules?

The correct answer is D. Policy Optimizer. The Policy Optimizer feature enables an administrator to review the Security policy rule base for unused rules, unused applications, and shadowed rules. The Policy Optimizer provides information and recommendations to help optimize the Security policy rules and reduce the…

Submitted by lukas.cz· Apr 18, 2026Policy Evaluation and Management

Question

Which feature enables an administrator to review the Security policy rule base for unused rules?

Options

  • ASecurity policy tags
  • BTest Policy Match
  • CView Rulebase as Groups
  • DPolicy Optimizer

How the community answered

(64 responses)
  • A
    5% (3)
  • B
    2% (1)
  • C
    2% (1)
  • D
    92% (59)

Explanation

The Policy Optimizer feature enables an administrator to review the Security policy rule base for unused rules, unused applications, and shadowed rules. The Policy Optimizer provides information and recommendations to help optimize the Security policy rules and reduce the attack surface. The Policy Optimizer can also identify rules that can be converted to use App-ID instead of port-based criteria.

Topics

#Policy Optimization#Security Policy#Rulebase Management#Unused Rules

Community Discussion

No community discussion yet for this question.

Full PCNSA Practice