What are the two behavior differences between Highlight Unused Rules and the Rule Usage Hit counter when a firewall is rebooted? (Choose two.)

The correct answer is A. Rule Usage Hit counter will not be reset B. Highlight Unused Rules will highlight all rules. These two features store their data differently. The Rule Usage Hit counter is persisted to disk, so it survives a reboot and is NOT reset (A). Highlight Unused Rules, by contrast, tracks rule hits only in memory during the current runtime session. When the firewall reboots…

Submitted by asante_acc· Apr 18, 2026Operate

Question

Options

ARule Usage Hit counter will not be reset
BHighlight Unused Rules will highlight all rules.
CHighlight Unused Rules will highlight zero rules.
DRule Usage Hit counter will reset.

How the community answered

(46 responses)

A
91% (42)
C
2% (1)
D
7% (3)

Explanation

These two features store their data differently. The Rule Usage Hit counter is persisted to disk, so it survives a reboot and is NOT reset (A). Highlight Unused Rules, by contrast, tracks rule hits only in memory during the current runtime session. When the firewall reboots, that in-memory tracking is cleared, so no rule has been matched yet - causing all rules to be highlighted as unused (B). This is a key operational distinction: the hit counter gives a long-term cumulative view, while Highlight Unused Rules reflects only activity since the last boot.

Topics

#Rule Usage Monitoring#Security Policy Management#Firewall Operations#System Reboot Behavior

Community Discussion

No community discussion yet for this question.

Full PCNSE Practice