Palo Alto Networks Certified Network Security Administrator (PCNSA) — Question 405
What is the main function of the Test Policy Match function?
Answer options
- A. ensure that policy rules are not shadowing other policy rules
- B. confirm that rules meet or exceed the Best Practice Assessment recommendations
- C. confirm that policy rules in the configuration are allowing donning the correct traffic
- D. verify that policy rules from Expedition are valid
Correct answer: C
Explanation
The Test Policy Match function's main role is to verify that the policy rules in the configuration allow the appropriate traffic, which corresponds to option C. Options A, B, and D, while relevant to policy management, do not specifically address the function of ensuring that the correct traffic is being allowed by the policy rules.