Palo_Alto_NetworksPalo_Alto_Networks
PCNSA · Question #46
PCNSA Question #46: Real Exam Question with Answer & Explanation
Sign in or unlock PCNSA to reveal the answer and full explanation for question #46. The question stem and answer options stay visible for context.
Submitted by rohit_dlh· Apr 18, 2026Securing Traffic
Question
A server-admin in the USERS-zone requires SSH-access to all possible servers in all current and future Public Cloud environments. All other required connections have already been enabled between the USERS-and the OUTSIDE-zone. What configuration-changes should the Firewall- admin make?
Options
- ACreate a custom-service-object called SERVICE-SSH for destination-port-TCP-22. Create a
- BCreate a security-rule that allows traffic from zone USERS to OUTSIDE to allow traffic from any
- CIn addition to option a, a custom-service-object called SERVICE-SSH-RETURN that contains
- DIn addition to option c, an additional rule from zone OUTSIDE to USERS for application SSH from
Unlock PCNSA to see the answer
You've previewed enough free PCNSA questions. Unlock PCNSA for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.
Topics
#Security Policies#Zone-Based Filtering#SSH#Public Cloud Access