Palo Alto Networks Certified Network Security Administrator (PCNSA) — Question 408

Which security policy match condition would an administrator use to block traffic to IP addresses on the Palo Alto Networks Bulletproof IP Addresses list?

Answer options

• A. source address
• B. destination address
• C. source zone
• D. destination zone

Correct answer: B

Explanation

The correct answer is B, as the destination address is where the traffic is headed, and blocking this will prevent access to the listed IPs. Options A, C, and D are incorrect because they pertain to the origin of the traffic or the zones rather than the target addresses that need to be blocked.