PCNSA Policy Evaluation and Management Practice Question
Exhibit
admin@PA-500> show object address-group "internal-servers"
group {
members [ server1 server2 ]
}
admin@PA-500> show object address "server1"
address {
ip-netmask 10.10.10.0/24
}
admin@PA-500> show object address "server2"
address {
ip-range 10.10.20.1-10.10.20.10
}Refer to the exhibit. A security rule is configured with destination address group 'internal-servers'. A packet with destination IP 10.10.20.5 arrives. Will the rule match?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Yes, because 10.10.20.5 is within the range of server2.
10.10.20.5 is within the IP range defined by server2 (10.10.20.1-10.10.20.10). Option B is wrong because address groups can contain multiple objects. Option C is wrong because the group does not include all internal addresses. Option D is wrong because destination can be a range or subnet.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Yes, because 10.10.20.5 is within the range of server2.
Why this is correct
The IP range in server2 includes 10.10.20.5.
- ✗
No, because the destination must be a single IP address.
Why it's wrong here
Destination can be a subnet or range, not necessarily a single IP.
- ✗
Yes, because the address group includes all internal addresses.
Why it's wrong here
The group only contains the two specified objects, not all internal addresses.
- ✗
No, because the address group uses multiple objects.
Why it's wrong here
Multiple objects are allowed in an address group.
Visual reference
Go deeper
Related to this question
About these practice questions
This PCNSA question is part of Courseiva's 516-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This PCNSA practice question is part of Courseiva's free Palo Alto Networks certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the PCNSA exam.