Palo Alto Networks Exam PCNSE Topic 7 Question 45 Discussion

Actual exam question for Palo Alto Networks's Palo Alto Networks Certified Security Engineer PAN-OS 11.0 exam

Question #: 45
Topic #: 7

[All Palo Alto Networks Certified Security Engineer PAN-OS 11.0 Questions]

A firewall administrator has completed most of the steps required to provision a standalone Palo Alto Networks Next-Generation Firewall. As a final step, the administrator wants to test one of the security policies.

Which CLI command syntax will display the rule that matches the test?

Atest security -policy- match source <ip_address> destination <IP_address> destination port protocol

Bshow security rule source <ip_address> destination <IP_address> destination port protocol

Ctest security rule source <ip_address> destination <IP_address> destination port protocol

Dshow security-policy-match source <ip_address> destination <IP_address> destination port protocol
test security-policy-match source

Show Suggested Answer

Suggested Answer: A

test security-policy-match source <source IP> destination <destination IP> protocol

https://live.paloaltonetworks.com/t5/Management-Articles/How-to-Test-Which-Security-Policy-Applies-to-a-Traffic-Flow/ta-p/53693

by Laticia at May 10, 2022, 03:14 AM

Limited Time Offer

25%

Off

Get Premium PCNSE Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Currently there are no comments in this discussion, be the first to comment!