A Security policy rule is configured with a Vulnerability Protection Profile and an action of `Deny". Which action will this cause configuration on the matched traffic?

Question

Options

• AThe configuration is invalid. The Profile Settings section will be grayed out when the Action is set to "Deny".
• BThe configuration will allow the matched session unless a vulnerability is detected. The "Deny" action will supersede the per-severity defined actions defined in
• CThe configuration is invalid. It will cause the firewall to skip this Security policy rule. A warning will be displayed during a commit.
• DThe configuration is valid. It will cause the firewall to deny the matched sessions. Any configured Security Profiles have no effect if the Security policy rule

• A
  10% (3)
• B
  16% (5)
• C
  3% (1)
• D
  71% (22)

Explanation

Explanation/Reference: "Security profiles are not used in the match criteria of a traffic flow. The security profile is applied to scan traffic after the application or category is allowed by the security policy." https://docs.paloaltonetworks.com/pan-os/8-1/pan-os-admin/policy/security-profiles.html#

No community discussion yet for this question.