Palo Alto Networks Certified Network Security Engineer (PCNSE) — Question 191

An administrator needs to validate that policies that will be deployed will match the appropriate rules in the device-group hierarchy.
Which tool can the administrator use to review the policy creation logic and verify that unwanted traffic is not allowed?

Answer options

• A. Preview Changes
• B. Policy Optimizer
• C. Managed Devices Health
• D. Test Policy Match

Correct answer: A

Explanation

The correct answer is A, Preview Changes, because it allows administrators to see how the policies will interact with the existing rules before deployment. The other options, while useful for different purposes, do not specifically focus on previewing policy changes and their potential impacts on traffic management.