Courseiva
← PCNSA
Full test
easyMultiple ChoiceObjective-mapped

PCNSA Practice Question: Refer to the exhibit

Exhibit

Refer to the exhibit.

Security rule configuration:

description: 'Allow web traffic'
source-zone: Trust
destination-zone: Untrust
source-address: 192.168.1.0/24
destination-address: any
application: web-browsing, ssl
service: application-default
action: allow
profile-group: strict-profile-group
log-end: yes

Refer to the exhibit. Which profile group is applied to this security rule?

⚠ Common exam trap

It's easy for candidates to confuse the 'Profile Group' field with the 'Log Setting' field, or assume that 'no profile group' is applied when the field shows a group name, but the exhibit explicitly shows 'strict-profile-group' selected.

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

✓

strict-profile-group

The exhibit shows the security rule's 'Profile Group' field set to 'strict-profile-group', which applies a predefined set of security profiles (antivirus, anti-spyware, vulnerability protection, URL filtering, and file blocking) to the rule. This is visible in the rule configuration where the profile group is explicitly selected, not set to 'none' or a custom group.

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

  • ✗

    No profile group is applied

    Why it's wrong here

    The group is explicitly defined.

  • ✓

    strict-profile-group

    Why this is correct

    The profile group explicitly set to 'strict-profile-group'.

  • ✗

    log-profile-group

    Why it's wrong here

    Log profile is separate; this is a profile group.

  • ✗

    default-profile-group

    Why it's wrong here

    The configuration shows 'strict-profile-group'.

About these practice questions

One of 516 original PCNSA practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →

How Courseiva writes practice questions · Editorial policy

JA

Written by Johnson Ajibi, MSc IT Security

Senior Network & Security Engineer · founder of Courseiva

This PCNSA practice question is part of Courseiva's free Palo Alto Networks certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the PCNSA exam.