PCNSA Managing Objects Practice Question

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

• ✓

  Create VLAN object, then assign Layer 2 interfaces to VLAN, then configure IP address on VLAN interface, then create security policy, then commit

  Why this is correct

  This is the correct order because you must first create the VLAN, then assign interfaces to it, then assign an IP to the VLAN interface, then create a security policy to permit traffic, and finally commit the changes.

• ✗

  Create VLAN object, then configure IP address on VLAN interface, then assign Layer 2 interfaces to VLAN, then create security policy, then commit

  Why it's wrong here

  This is incorrect because you cannot configure an IP address on a VLAN interface before assigning interfaces to the VLAN; the VLAN interface is not fully created until interfaces are assigned.

• ✗

  Create security policy, then create VLAN object, then assign Layer 2 interfaces to VLAN, then configure IP address on VLAN interface, then commit

  Why it's wrong here

  This is incorrect because you cannot create a security policy before the VLAN interface exists; the security policy references the VLAN interface, which must be created first.

• ✗

  Create VLAN object, then assign Layer 2 interfaces to VLAN, then configure IP address on VLAN interface, then commit, then create security policy

  Why it's wrong here

  This is incorrect because committing before creating a security policy would leave the VLAN interface unprotected; you must create the security policy before committing to ensure traffic is allowed.

Go deeper

Related to this question