Palo Alto Networks Certified Network Security Administrator Practice Mode

Community Discussion

Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.

• 1

  Block Access to or from Known-Bad URLs: Two methods are available to block access to risky URL categories. The first method is to add the URL categories as match conditions to a Security policy deny rule. URL categories can be used as matching criteria in Security, QoS, Decryption, and Authentication policy. The second method is to control access to URL categories using a URL Filtering Profile attached to a Security policy "allow" rule. Options: A e D.

• 1

  B. Custom URL Categories C. PAN-DB URL Categories These categories allow the administrator to control access to specific URLs and categories of URLs. Actions such as block, alert, continue, override, or allow can be set for these categories based on the organization’s security policy.

• 2

  Found on Palo Alto site: Answer is A: Block List and D: Allow List From most strict to least strict, possible URL Filtering profile actions are: block, override, continue, alert, and allow. https://docs.paloaltonetworks.com/advanced-url-filtering/administration/url-filtering-basics/url-filtering-profiles