Palo Alto Networks Certified Network Security Engineer (PCNSE)Deploy and ConfigureMedium
A company is implementing a new voice-over-IP (VoIP) system and requires that all SIP (Session Initiation Protocol) and RTP (Real-time Transport Protocol) traffic be prioritized over general web browsing traffic. Which Quality of Service (QoS) configuration element should be used to achieve this prioritization?
- AQoS Profile
- BZone Protection Profile
- CSecurity Policy Rule
- DApplication Filter
Show answer & explanationAnswer & explanation
Correct answer: A. QoS Profile
QoS Profiles are specifically designed to classify, mark, and prioritize traffic based on applications, services, or zones. By applying a QoS Profile, the firewall can ensure VoIP traffic receives preferential treatment.
Why the other options are wrong
- B. Zone Protection Profiles defend against attacks, not prioritize application traffic.
- C. Security Policy Rules permit or deny traffic, but do not inherently prioritize it.
- D. Application Filters are used to group applications for Security Policy or App-ID rules, not for QoS prioritization.
QoS Profile
A configuration object that defines how traffic is classified, marked, and prioritized based on application, service, or zone to ensure critical applications receive the necessary bandwidth and low latency.
- Classifies traffic using App-ID, Service, or Zone.
- Marks traffic using DSCP or 802.1p.
- Prioritizes traffic into queues for bandwidth management.
- Applied to interfaces where QoS is enabled.
Memory trick: Quality Service for Important Packets.