PCNSE · Question #594
Which benefit do policy rule UUlDs provide?
The correct answer is A. An audit trail across a policy's lifespan. Policy rule UUIDs provide a stable and persistent identifier for each security policy, facilitating auditing and tracking changes over time.
Question
Which benefit do policy rule UUlDs provide?
Options
- AAn audit trail across a policy's lifespan
- BFunctionality for scheduling policy actions
- CThe use of user IP mapping and groups in policies
- DCloning of policies between device-groups
How the community answered
(64 responses)- A91% (58)
- B3% (2)
- C5% (3)
- D2% (1)
Why each option
Policy rule UUIDs provide a stable and persistent identifier for each security policy, facilitating auditing and tracking changes over time.
Policy rule UUIDs provide a persistent and unique identifier for each policy rule, allowing administrators to track changes, modifications, and deployments of a specific rule throughout its entire lifespan, even if the rule's name or position changes. This stable identifier greatly enhances auditing and compliance efforts.
Functionality for scheduling policy actions is provided by time objects in security policies, not by the unique identifiers (UUIDs) of the rules themselves.
The use of user IP mapping and groups in policies is achieved through the User-ID feature, which links users to IP addresses, and is unrelated to policy rule UUIDs.
While policy rules can be cloned between device groups, the primary benefit of UUIDs is not the cloning functionality itself, but rather the ability to consistently identify and track the rule before and after such operations for auditing purposes.
Concept tested: Policy rule UUID benefits
Source: https://docs.paloaltonetworks.com/pan-os/10-2/pan-os-admin/policy/security-policy/policy-rule-uuids.html
Topics
Community Discussion
No community discussion yet for this question.