Palo Alto Networks Certified Network Security Administrator (PCNSA) — Question 147

An administrator would like to create a URL Filtering log entry when users browse to any gambling website.
What combination of Security policy and Security profile actions is correct?

Answer options

• A. Security policy = deny, Gambling category in URL profile = block
• B. Security policy = drop, Gambling category in URL profile = allow
• C. Security policy = allow, Gambling category in URL profile = alert
• D. Security policy = allow, Gambling category in URL profile = allow

Correct answer: C

Explanation

The correct answer is C because using an 'allow' security policy along with the 'alert' action for the Gambling category ensures that access is permitted while also creating a log entry for monitoring. Options A and B block access or allow it without logging, which does not meet the requirement of creating a log entry. Option D allows access without any alerts, failing to log the activity as requested.