Palo Alto Networks Exam PCNSA Topic 2 Question 68 Discussion

Actual exam question for Palo Alto Networks's Palo Alto Networks Certified Network Security Administrator exam

Question #: 68
Topic #: 2

[All Palo Alto Networks Certified Network Security Administrator Questions]

Review the Screenshot:

Given the network diagram, traffic must be permitted for SSH and MYSQL from the DMZ to the SERVER zones, crossing two firewalls. In addition, traffic should be permitted from the

SERVER zone to the DMZ on SSH only.

Which rule group enables the required traffic?

AOption A

BOption B

COption C

DOption D

Show Suggested Answer

Suggested Answer: B

Option B enables the required traffic by allowing SSL and web-browsing from UNTRUST to DMZ, denying SSH from UNTRUST to DMZ, allowing MYSQL from DMZ to SERVER, and allowing SSH from SERVER to DMZ. Option A allows SSH from UNTRUST to DMZ, which is not required. Option C denies all the required traffic.Option D denies all traffic from UNTRUST to TRUST, which is irrelevant to the question

https://www.paloaltonetworks.com/services/education/palo-alto-networks-certified-network-security-administrator

by Candida at Jul 06, 2024, 10:41 PM

Limited Time Offer

25%

Off

Get Premium PCNSA Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Skye

2 months ago

Option C is the way to go, no doubt. It's the most comprehensive and seems to hit all the key points. Boom, easy peasy!

upvoted 0 times

Fannie

26 days ago

Yeah, Option C looks like the best choice for this scenario.

upvoted 0 times

...

Jerrod

27 days ago

I agree, Option C covers all the necessary traffic rules.

upvoted 0 times

...

Garry

2 months ago

I'm always a fan of the 'kitchen sink' approach, so I'm gonna go with Option A. Can't go wrong with allowing ALL the things, right?

upvoted 0 times

...

Yolande

2 months ago

Hmm, this is a tricky one. I'm going to go with Option D - it's the only one that mentions 'crossing two firewalls', which seems relevant to the question.

upvoted 0 times

Vallie

1 months ago

Yes, Option D is the most suitable choice as it aligns with the need for traffic to pass through two firewalls in the given network setup.

upvoted 0 times

...

Chandra

2 months ago

Option D does make sense considering the specific requirement of traffic crossing two firewalls. It's the best fit for the scenario.

upvoted 0 times

...

Jodi

2 months ago

Yeah, Option D is the best choice here. It specifically addresses the requirement of traffic crossing two firewalls.

upvoted 0 times

...

Antonio

2 months ago

I agree, Option D seems to be the most logical choice based on the requirement of traffic crossing two firewalls.

upvoted 0 times

...

Theola

2 months ago

I think Option D is the correct choice too. It mentions crossing two firewalls, which is important for the scenario.

upvoted 0 times

...

Vivan

2 months ago

I agree, Option D seems to be the most relevant based on the information provided in the question.

upvoted 0 times

...

Alyce

2 months ago

I think Option D is the correct choice too. It mentions crossing two firewalls, which is important for the required traffic.

upvoted 0 times

...

Aleisha

2 months ago

Hmm, that makes sense too. Let's review the diagram again to confirm.

upvoted 0 times

...

Cammy

3 months ago

I disagree, I believe the answer is Option C as it permits traffic from SERVER zone to DMZ on SSH only.

upvoted 0 times

...

Ligia

3 months ago

I'm leaning towards Option B. It seems to cover the required traffic flows, and the rule descriptions are clear.

upvoted 0 times

...

Kattie

3 months ago

Option C looks good. It allows SSH and MYSQL from the DMZ to the SERVER zones, and also permits SSH from the SERVER zone to the DMZ.

upvoted 0 times

Flo

2 months ago

Yes, Option C is the correct choice for enabling the necessary traffic.

upvoted 0 times

...

Billy

2 months ago

I agree, Option C covers all the required traffic rules.

upvoted 0 times

...

Aleisha

3 months ago

I think the answer is Option A because it allows traffic for SSH and MYSQL from DMZ to SERVER zones.

upvoted 0 times

...