Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
Palo Alto Networks Certified Network Security Administrator (PCNSA) · Palo Alto Networks
Select one answer.
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
When you configure a URL category directly in a security rule as match criteria, that will be analyzed before all security profiles, including URL-Filtering. Within URL-Filtering, custom categories are analyzed first, then EDLs, then pre-defined categories. So the answer must be D.
The precedence is from the top down; First Match Wins: 1) Block list: Manually entered blocked URLs Objects 2) Allow list: Manually entered allowed URLs Objects - 3) Custom URL Categories - 4) Cached Cached: URLs learned from External Dynamic Lists (EDLs) - 5) Pre-Defined Categories: PAN-DB or Brightcloud categories.
I think D is the most accurate according to this topic https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClyTCAS