Palo Alto Networks Certified Network Security Administrator (PCNSA) — Question 86

A Security Profile can block or allow traffic at which point?

Answer options

• A. on either the data plane or the management plane
• B. after it is matched to a Security policy rule that allows or blocks traffic
• C. after it is matched to a Security policy rule that allows traffic
• D. before it is matched to a Security policy rule

Correct answer: C

Explanation

The correct answer is C because a Security Profile evaluates traffic after it has been matched to a rule that permits it, allowing for further inspection. Options A and D are incorrect as they do not specify the necessary matching to a policy rule, while option B includes both allowing and blocking, which is not the focus of the question.