Palo_Alto_NetworksPalo_Alto_Networks
PCNSE · Question #629
PCNSE Question #629: Real Exam Question with Answer & Explanation
Sign in or unlock PCNSE to reveal the answer and full explanation for question #629. The question stem and answer options stay visible for context.
Submitted by anjalisingh· Apr 18, 2026Deploy and Configure
Question
A network security engineer needs to enable Zone Protection in an environment that makes use of Cisco TrustSec Layer 2 protections. What should the engineer configure within a Zone Protection profile to ensure that the TrustSec packets are identified and actions are taken upon them?
Options
- AStream ID in the IP Option Drop options
- BRecord Route in IP Option Drop options
- CEthernet SGT Protection
- DTCP Fast Open in the Strip TCP options
Unlock PCNSE to see the answer
You've previewed enough free PCNSE questions. Unlock PCNSE for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.
Topics
#Zone Protection Profiles#Cisco TrustSec#SGT Protection#Layer 2 Security