PCNSA Policy Evaluation and Management Practice Question
How can an administrator quickly identify which security rules are not being used in order to clean up the rulebase?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Use the Policy Optimizer tool to view rule hit counts.
The Policy Optimizer tool in Palo Alto Networks firewalls provides rule hit counts, allowing administrators to quickly identify which security rules are not being used. Option A, 'show rulebase', displays the rulebase but does not show hit counts. Option B, checking commit logs, reveals recent changes but not usage frequency. Option C, sorting rules by rule number, does not indicate whether rules are used.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Use the 'show rulebase' command.
Why it's wrong here
This command shows the rulebase but not hit counts.
- ✗
Check the commit logs for recent changes.
Why it's wrong here
Commit logs show changes, not rule usage.
- ✗
Sort rules by rule number in descending order.
Why it's wrong here
Sorting does not show usage.
- ✓
Use the Policy Optimizer tool to view rule hit counts.
Why this is correct
Policy Optimizer shows hit counts, enabling identification of unused rules.
Go deeper
Related to this question
About these practice questions
Courseiva writes every PCNSA question from scratch — 516 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This PCNSA practice question is part of Courseiva's free Palo Alto Networks certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the PCNSA exam.