PCNSA Policy Evaluation and Management Practice Question
A network security administrator at a university wants to allow students in the 'Student' zone to access the internet, but only during exam periods should they be blocked from social media. The administrator creates a security rule at the top of the rulebase that denies social media applications from the Student zone to the Internet zone and schedules it to be active only during exam weeks using a schedule object. Which statement correctly describes the evaluation of this rule?
⚠ Common exam trap
The trap here is assuming that an inactive schedule changes the rule's action or causes immediate fallback to the default rule, when in fact the rule is simply skipped and evaluation continues.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
The rule will be evaluated only when the schedule is active; outside the schedule, it is skipped and later rules are evaluated.
Security rules can be associated with schedule objects to make them active only during specific time periods. When the schedule is inactive, the rule is skipped entirely during policy evaluation, allowing subsequent rules to be processed. This enables temporary enforcement without manual rule changes, which is ideal for time-bound restrictions like exam-period social media blocks.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
The rule will be evaluated only when the schedule is active; outside the schedule, it is skipped and later rules are evaluated.
Why this is correct
Security rules with an attached schedule object are only active during the defined times. When the schedule is inactive, the firewall skips that rule and continues evaluating subsequent rules in the rulebase. This allows temporary policy enforcement without manual intervention, exactly as intended for blocking social media only during exam periods.
- ✗
The rule will always be evaluated, but the action will be changed to allow when the schedule is inactive.
Why it's wrong here
The action of a security rule is static; it does not change based on schedule. When a schedule is inactive, the rule is not evaluated at all, rather than changing its action. This misconception could lead to unexpected allows if the administrator assumes the rule still provides some control outside the schedule.
- ✗
The rule will be evaluated only if the schedule is active, and if inactive, the default interzone-default rule will be applied immediately.
Why it's wrong here
When a scheduled rule is inactive, it is skipped entirely, and evaluation continues with the next rule in the rulebase. The interzone-default rule is only reached after all other rules are evaluated. Assuming immediate fallback to the default rule ignores the presence of other rules that might match the traffic.
- ✗
The rule will be evaluated regardless of schedule, but logging will be suppressed when the schedule is inactive.
Why it's wrong here
Schedules control whether a rule is active, not logging behavior. When a schedule is inactive, the rule is not evaluated and thus no log is generated from that rule. Logging suppression is unrelated to schedule objects; it is configured separately per rule.
Go deeper
Related to this question
About these practice questions
Courseiva writes every PCNSA question from scratch — 385 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed September 2026 · checked against the official Palo Alto Networks exam blueprint
This PCNSA practice question is part of Courseiva's free Palo Alto Networks certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the PCNSA exam.