PCNSE Question #478: Real Exam Question with Answer & Explanation

Question

A network security engineer must implement Quality of Service policies to ensure specific levels of delivery guarantees for various applications in the environment. ]They want to ensure that they know as much as they can about QoS before deploying. Which statement about the QoS feature is correct?

Options

• AQoS is only supported on firewalls that have a single virtual system configured
• BQoS can be used in conjunction with SSL decryption
• CQoS is only supported on hardware firewalls
• DQoS can be used on firewalls with multiple virtual systems configured

Explanation

Palo Alto Networks QoS (Quality of Service) can be configured on firewalls running multiple virtual systems (multi-vsys), making option D correct. Option A is false - QoS is not restricted to single-vsys deployments. Option B is a distractor - while QoS and SSL decryption can coexist on a firewall, there are interactions to consider and this is not the most accurate standalone true statement about QoS. Option C is false - QoS is also supported on VM-Series virtual firewalls, not exclusively hardware platforms. QoS policies allow administrators to classify, prioritize, and guarantee bandwidth for traffic flows, and this capability is available regardless of the number of virtual systems configured on the firewall.

No community discussion yet for this question.