diff --git a/check-before-deployment.md b/check-before-deployment.md
index d0a3c86ae3064..fdf8874a70863 100644
--- a/check-before-deployment.md
+++ b/check-before-deployment.md
@@ -211,13 +211,15 @@ Instead of completely disabling it is also possible to change the default zone.
 firewall-cmd --set-default-zone trusted
 ```
 
-to verify
+To verify:
+
 ```
 # firewall-cmd --get-default-zone
 trusted
 ```
 
-to list the policy for a zone
+To list the policy for a zone:
+
 ```
 # firewall-cmd --zone=trusted --list-all
 trusted