Palo Alto Networks Exam PCNSA Topic 4 Question 64 Discussion

Actual exam question for Palo Alto Networks's PCNSA exam

Question #: 64
Topic #: 4

Review the Screenshot:

Given the network diagram, traffic must be permitted for SSH and MYSQL from the DMZ to the SERVER zones, crossing two firewalls. In addition, traffic should be permitted from the

SERVER zone to the DMZ on SSH only.

Which rule group enables the required traffic?

AOption A

BOption B

COption C

DOption D

Show Suggested Answer

Suggested Answer: B

Option B enables the required traffic by allowing SSL and web-browsing from UNTRUST to DMZ, denying SSH from UNTRUST to DMZ, allowing MYSQL from DMZ to SERVER, and allowing SSH from SERVER to DMZ. Option A allows SSH from UNTRUST to DMZ, which is not required. Option C denies all the required traffic.Option D denies all traffic from UNTRUST to TRUST, which is irrelevant to the question

https://www.paloaltonetworks.com/services/education/palo-alto-networks-certified-network-security-administrator

by Laurel at May 23, 2024, 07:04 AM

Limited Time Offer

25%

Off

Get Premium PCNSA Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Nan

5 months ago

Option C is the way to go. It's like a well-choreographed dance, with the traffic flowing smoothly between the zones.

upvoted 0 times

Dorothea

4 months ago

I agree, Option C seems to be the most efficient rule group for this scenario.

upvoted 0 times

...

Ma

5 months ago

Option C is the best choice. It allows the necessary traffic to flow smoothly.

upvoted 0 times

...

Aileen

5 months ago

I agree, C is the correct answer. The diagram clearly shows the required traffic flow between the zones.

upvoted 0 times

...

Aleisha

5 months ago

Option C looks good to me. It allows SSH and MySQL traffic from the DMZ to the Server zone, and SSH traffic from the Server zone to the DMZ.

upvoted 0 times

Twila

5 months ago

I agree, Option C seems to meet the requirements for the traffic flow in the network diagram.

upvoted 0 times

...

Trinidad

5 months ago

Option C looks good to me. It allows SSH and MySQL traffic from the DMZ to the Server zone, and SSH traffic from the Server zone to the DMZ.

upvoted 0 times

...