Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25

- Free Preparation Discussions

Palo Alto Networks Exam PCNSA Topic 1 Question 73 Discussion

Actual exam question for Palo Alto Networks's PCNSA exam

Question #: 73
Topic #: 1

[All PCNSA Questions]

Which CLI command will help confirm if FQDN objects are resolved in the event there is a shadow rule?

A>show system fqdn

B>request fqdn show system

C>request show system fqdn

D>request system fqdn show

Show Suggested Answer

Suggested Answer: A

The show system fqdn command displays the FQDN objects configured on the firewall and their resolved IP addresses. This can help confirm if the FQDN objects are resolved correctly and if they match the expected traffic. A shadow rule is a rule that is never matched because a preceding rule covers the same traffic. If a shadow rule uses FQDN objects, it is possible that the FQDN objects are not resolved or have different IP addresses than the traffic, causing the rule to be ineffective.

by Carin at Sep 13, 2024, 05:44 AM

Limited Time Offer

25%

Off

Get Premium PCNSA Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Maynard

9 months ago

I'm going to have to agree with Carol on this one. C is the way to go. Though I do wonder if any of these commands involve a dance routine...

upvoted 0 times

Karan

9 months ago

C) >request show system fqdn

upvoted 0 times

...

Xuan

9 months ago

B) >request fqdn show system

upvoted 0 times

...

Maryln

9 months ago

A) >show system fqdn

upvoted 0 times

...

...

Josephine

10 months ago

I see your point, but I still think A) is the best choice because it specifically mentions 'fqdn'.

upvoted 0 times

...

Grover

10 months ago

I disagree, I believe the correct answer is C) >request show system fqdn.

upvoted 0 times

...

Josephine

10 months ago

I think the answer is A) >show system fqdn.

upvoted 0 times

...

Margurite

10 months ago

Hmm, I'm torn between B and D. Maybe I'll just flip a coin. Or ask the Magic 8 Ball.

upvoted 0 times

Dominga

9 months ago

Let's go with D then

upvoted 0 times

...

Brittani

9 months ago

I agree, D sounds like the right command to use

upvoted 0 times

...

Orville

9 months ago

I think it's D) >request system fqdn show

upvoted 0 times

...

...

Haydee

10 months ago

B seems a bit too wordy. I'm going with A - 'show system fqdn' gets the job done without all the fluff.

upvoted 0 times

...

Hoa

10 months ago

D looks good to me. 'request system fqdn show' just has a nice ring to it, you know?

upvoted 0 times

...

Carol

10 months ago

I think the answer is C. 'request show system fqdn' seems like the most straightforward way to check FQDN resolution.

upvoted 0 times

Laquanda

9 months ago

I agree with you, C seems like the correct choice to confirm FQDN resolution.

upvoted 0 times

...

Buck

9 months ago

I believe it's D. 'request system fqdn show' seems like it would give the information needed.

upvoted 0 times

...

Johna

10 months ago

I'm not sure, but I think it might be A. 'show system fqdn' sounds like it could be the right command.

upvoted 0 times

...

Reta

10 months ago

I think it's actually 'request system fqdn show' that you should use.

upvoted 0 times

...

Ardella

10 months ago

I think the answer is C. 'request show system fqdn' seems like the most straightforward way to check FQDN resolution.

upvoted 0 times

...

Beckie

10 months ago

I agree, 'request show system fqdn' is the correct command to use.

upvoted 0 times

...

...