Employees are shown an application block page when they try to access YouTube. Which security policy is blocking the YouTube application?

The correct answer is D. interzone-default. In PAN Alto Networks PAN-OS, the interzone-default rule is the implicit security policy at the bottom of the rule base that denies all traffic traveling between different security zones (e.g., from the Trust zone to the Untrust/internet zone). YouTube traffic from internal…

Submitted by layla.eg· Apr 18, 2026Policy Evaluation and Management

Question

Exhibit

Options

Aintrazone-default
BDeny Google
Callowed-security services
Dinterzone-default

How the community answered

(30 responses)

B
3% (1)
C
7% (2)
D
90% (27)

Explanation

In PAN Alto Networks PAN-OS, the interzone-default rule is the implicit security policy at the bottom of the rule base that denies all traffic traveling between different security zones (e.g., from the Trust zone to the Untrust/internet zone). YouTube traffic from internal users travels from an internal zone to the external zone, making it subject to interzone-default when no explicit allow rule exists. The block page confirms a deny action is being applied. Option A (intrazone-default) handles traffic within the same zone, which would not apply to internet-bound YouTube traffic. Option B (Deny Google) is a distractor - if such a named rule existed and was hit, it would be the answer, but the interzone-default is the rule blocking it in this scenario. Option C (allowed-security services) appears to be an allow rule, not a block rule.

Topics

#Security Policy#Policy Evaluation#Default Deny#Interzone Traffic

Community Discussion

No community discussion yet for this question.

Full PCNSA Practice