PCNSE Question #38: Real Exam Question with Answer & Explanation

Question

A network Administrator needs to view the default action for a specific spyware signature. The administrator follows the tabs and menus through Objects> Security Profiles> Anti- Spyware and select default profile. What should be done next?

Options

• AClick the simple-critical rule and then click the Action drop-down list.
• BClick the Exceptions tab and then click show all signatures.
• CView the default actions displayed in the Action column.
• DClick the Rules tab and then look for rules with "default" in the Action column.

Explanation

To view the default action for a specific spyware signature in PAN-OS, you navigate to Objects > Security Profiles > Anti-Spyware, open the profile (e.g., 'default'), then click the Exceptions tab and click 'Show all signatures'. This reveals every individual signature entry along with its default action column, allowing the administrator to inspect or override per-signature behavior. The Rules tab (option D) shows threat severity-based rules (e.g., critical, high) with aggregate actions, not per-signature defaults. Option A (clicking a rule's Action drop-down) changes the action for a severity group, not a specific signature. Option C is not accurate because the main profile view does not directly display per-signature default actions.

No community discussion yet for this question.