Palo Alto Networks Certified Network Security Administrator (PCNSA) — Question 58

Recently changes were made to the firewall to optimize the policies and the security team wants to see if those changes are helping.
What is the quickest way to reset the hit counter to zero in all the security policy rules?

Answer options

• A. At the CLI enter the command reset rules and press Enter
• B. Highlight a rule and use the Reset Rule Hit Counter > Selected Rules for each rule
• C. Reboot the firewall
• D. Use the Reset Rule Hit Counter > All Rules option

Correct answer: D

Explanation

Option D is the correct choice because it allows for the hit counter of all rules to be reset simultaneously with a single action. Options A and C do not specifically address resetting hit counters, while option B only resets the counter for selected rules, making it less efficient than option D.