nerdexam
Palo_Alto_Networks

PCNSE7 · Question #49

Which command can be used to validate a Captive Portal policy?

The correct answer is C. test cp-policy-match <criteria>. You can use the test security-policy-match command to determine whether the policy is configured correctly. For example, suppose you have a rule that blocks user duane from playing World of Warcraft; you could test the policy as follows: test security-policy-match application…

Troubleshoot and Optimize

Question

Which command can be used to validate a Captive Portal policy?

Options

  • Aeval captive-portal policy <criteria>
  • Brequest cp-policy-eval <criteria>
  • Ctest cp-policy-match <criteria>
  • Ddebug cp-policy <criteria>

How the community answered

(24 responses)
  • A
    8% (2)
  • B
    4% (1)
  • C
    83% (20)
  • D
    4% (1)

Explanation

You can use the test security-policy-match command to determine whether the policy is configured correctly. For example, suppose you have a rule that blocks user duane from playing World of Warcraft; you could test the policy as follows: test security-policy-match application worldofwarcraft source-user acme\duane source any destination any destination-port any protocol 6 "deny worldofwarcraft" { source-region any; destination any; destination-region any; user acme\duane; application/service worldofwarcraft;

Topics

#Captive Portal#CLI test commands#policy match#user identification

Community Discussion

No community discussion yet for this question.

Full PCNSE7 Practice