PCNSA · Question #92
Which security policy rule would be needed to match traffic that passes between the Outside zone and Inside zone, but does not match traffic that passes within the zones?
The correct answer is C. interzone. PAN-OS has three security rule types: Universal matches both intrazone (same-zone) and interzone (different-zone) traffic; Intrazone matches only traffic where source and destination are in the same zone; Interzone matches only traffic where source and destination are in…
Question
Which security policy rule would be needed to match traffic that passes between the Outside zone and Inside zone, but does not match traffic that passes within the zones?
Options
- Aglobal
- Bintrazone
- Cinterzone
- Duniversal
How the community answered
(41 responses)- A5% (2)
- B2% (1)
- C90% (37)
- D2% (1)
Explanation
PAN-OS has three security rule types: Universal matches both intrazone (same-zone) and interzone (different-zone) traffic; Intrazone matches only traffic where source and destination are in the same zone; Interzone matches only traffic where source and destination are in different zones. Since the requirement is to match traffic between Outside and Inside (two different zones) while explicitly excluding within-zone traffic, the correct rule type is Interzone. Universal (D) would also match the interzone traffic but would additionally match intrazone traffic, making it too broad for this requirement.
Topics
Community Discussion
No community discussion yet for this question.