PCNSA Device Management and Services Practice Question

Drag and drop the steps to configure a security policy on a Palo Alto Networks firewall into the correct order.

Drag steps to the numbered slots on the right, or tap a step then tap a slot.

Steps

Order

1Step 1

2Step 2

3Step 3

4Step 4

5Step 5

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

✓

Define zones, then address objects, then application/service, then action, then commit

Security policies are configured by first defining zones, then addresses, then application/service, then action, and finally committing.

Answer analysis

For each option: why learners choose it and why it is or isn't the right answer here.

✓
Define zones, then address objects, then application/service, then action, then commit
Why this is correct
This is the correct order because security policies are built hierarchically: zones define the traffic source/destination, address objects specify the endpoints, application/service identifies the traffic type, action dictates the response, and commit applies the changes.
✗
Define address objects, then zones, then application/service, then action, then commit
Why it's wrong here
This order is incorrect because zones must be defined first as they are fundamental to the policy structure; address objects depend on zone context.
✗
Define zones, then address objects, then action, then application/service, then commit
Why it's wrong here
This order is incorrect because you must specify the application/service before setting the action; the action depends on knowing which application/service is being allowed or denied.
✗
Commit, then define zones, then address objects, then application/service, then action
Why it's wrong here
This order is incorrect because commit is the final step to apply changes; all configuration steps must precede the commit.

Go deeper