Palo Alto Networks Certified Network Security Administrator (PCNSA) — Question 256

An administrator is troubleshooting an issue with traffic that matches the intrazone-default rule, which is set to default configuration.
What should the administrator do?

Answer options

• A. change the logging action on the rule
• B. review the System Log
• C. refresh the Traffic Log
• D. tune your Traffic Log filter to include the dates

Correct answer: A

Explanation

Changing the logging action on the rule allows the administrator to capture more detailed information about the traffic, which can aid in troubleshooting. Reviewing the System Log may provide some insights, but it won't directly address the specific traffic matching the rule. Refreshing the Traffic Log or tuning the filter may help in viewing the data but won't resolve the issue as effectively as modifying the logging action.