Palo Alto Networks Certified Network Security Administrator (PCNSA) — Question 63

Which rule type is appropriate for matching traffic both within and between the source and destination zones?

Answer options

• A. interzone
• B. shadowed
• C. intrazone
• D. universal

Correct answer: D

Explanation

The correct answer is D, universal, as it allows for traffic matching across both source and destination zones. Options A, C, and B are incorrect because interzone and intrazone rules only match traffic within their respective zones, and shadowed rules do not apply to traffic matching criteria.