Q: 8
DRAG DROP Place the following steps in the packet processing order of operations from first to last. 
Drag & Drop
Discussion
Option B is right, both security and NAT rules are evaluated from top down. A is a common trap.
DoS protection, Security policy lookup, content inspection, QOS shaping applied. I don't think content inspection comes before DoS-trap for sure.
DoS protection → Security policy lookup → content inspection → QOS shaping applied. That order lines up with what I've seen in practice and from Palo Alto docs. DoS has to catch attacks at ingress, then security policy checks, then does the deep packet inspection, and QoS wraps things up before sending out. Pretty sure on this but let me know if you see it differently.
DoS protection → Security policy lookup → Content inspection → QOS shaping applied. This matches the packet flow order Palo Alto uses: DoS checks first to drop attacks, then security policies decide if it's allowed, content inspection scans for threats, and finally QoS shapes traffic on the way out. Saw similar logic in the official study guide and labs. Think this is spot on, but open to other views if I'm missing something.
content inspection → DoS protection → Security policy lookup → QOS shaping applied
A tbh, I thought security was bottom-up since it applies the most specific rule first.
Be respectful. No spam.
