Palo Alto Networks Certified Network Security Administrator (PCNSA) — Question 24

Choose the option that correctly completes this statement. A Security Profile can block or allow traffic ____________.

Answer options

• A. on either the data place or the management plane.
• B. after it is matched by a security policy rule that allows traffic.
• C. before it is matched to a Security policy rule.
• D. after it is matched by a security policy rule that allows or blocks traffic.

Correct answer: B

Explanation

The correct answer is B because a Security Profile evaluates traffic after it has been matched by a security policy rule that specifically allows it. Options A, C, and D are incorrect as they either misrepresent the timing of the evaluation or do not accurately describe the function of the Security Profile in relation to the policy rules.