Palo Alto Networks Certified Network Security Engineer (PCNSE) — Question 507

Which type of policy in Palo Alto Networks firewalls can use Device-ID as a match condition?

Answer options

• A. Tunnel inspection
• B. NAT
• C. QoS
• D. DOS protection

Correct answer: C

Explanation

The correct answer is C, as QoS policies can leverage Device-ID to prioritize traffic based on the user or device identity. The other options, such as NAT and DOS protection, do not have the capability to use Device-ID for matching conditions.