Palo Alto Networks Exam PCNSA Topic 1 Question 62 Discussion

Actual exam question for Palo Alto Networks's PCNSA exam

Question #: 62
Topic #: 1

Review the Screenshot:

Given the network diagram, traffic must be permitted for SSH and MYSQL from the DMZ to the SERVER zones, crossing two firewalls. In addition, traffic should be permitted from the

SERVER zone to the DMZ on SSH only.

Which rule group enables the required traffic?

AOption A

BOption B

COption C

DOption D

Show Suggested Answer

Suggested Answer: B

Option B enables the required traffic by allowing SSL and web-browsing from UNTRUST to DMZ, denying SSH from UNTRUST to DMZ, allowing MYSQL from DMZ to SERVER, and allowing SSH from SERVER to DMZ. Option A allows SSH from UNTRUST to DMZ, which is not required. Option C denies all the required traffic.Option D denies all traffic from UNTRUST to TRUST, which is irrelevant to the question

https://www.paloaltonetworks.com/services/education/palo-alto-networks-certified-network-security-administrator

by Leonor at May 02, 2024, 11:55 PM

Limited Time Offer

25%

Off

Get Premium PCNSA Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Glory

5 months ago

Option A seems correct to me. It covers all requirements.

upvoted 0 times

...

Nu

5 months ago

Good point. Let's recheck Option A.

upvoted 0 times

...

Rashida

5 months ago

But does it allow SSH from SERVER to DMZ?

upvoted 0 times

...

Nu

6 months ago

I think it's Option C. It permits SSH and MYSQL from DMZ to SERVER, right?

upvoted 0 times

...

Marci

6 months ago

Yeah, I found it a bit tricky.

upvoted 0 times

...

Gilma

6 months ago

Did you see the network diagram question?

upvoted 0 times

...