Palo Alto Networks Certified Network Security Engineer (PCNSE)Deploy and ConfigureMedium

A network architect is designing a new data center and needs to ensure that critical applications receive preferential bandwidth during periods of congestion. Which QoS configuration element directly applies prioritization to specific traffic types?

  1. AQoS Policy Rule
  2. BDSCP Marking Profile
  3. CInterface QoS Profile
  4. DTraffic Shaping Profile
Show answer & explanation

Correct answer: A. QoS Policy Rule

A QoS Policy Rule on a Palo Alto Networks firewall is used to classify and mark traffic based on various criteria (application, user, zone, etc.) and then assign a QoS class or DSCP value, which is then acted upon by an Interface QoS Profile.

Why the other options are wrong

  • B. DSCP Marking Profiles are a component used within QoS Policy Rules to assign DSCP values, not the rule itself.
  • C. Interface QoS Profiles apply bandwidth management and queuing based on QoS classes, but don't classify the traffic itself.
  • D. Traffic Shaping Profiles limit bandwidth for specific traffic, rather than prioritize.

QoS Policy Rule

A QoS Policy Rule on a Palo Alto Networks firewall classifies traffic based on defined criteria and assigns it a specific QoS class or DSCP value, which is then used by interface QoS profiles for prioritization and bandwidth management.

  • Classifies traffic based on various attributes.
  • Assigns a QoS class or DSCP value.
  • Works in conjunction with Interface QoS Profiles.

Memory trick: The 'Quality of Service Policy Rule' is the traffic cop deciding who goes first.

More Deploy and Configure questions