Palo Alto Networks Certified Network Security Administrator (PCNSA) — Question 17

Four configuration choices are listed, and each could be used to block access to a specific URL. If you configured each choice to block the same URL then which choice would be the last to block access to the URL?

Answer options

• A. EDL in URL Filtering Profile
• B. Custom URL category in URL Filtering Profile
• C. Custom URL category in Security policy rule
• D. PAN-DB URL category in URL Filtering Profile

Correct answer: D

Explanation

The PAN-DB URL category in URL Filtering Profile is generally the last option to block access because it relies on a database curated by Palo Alto Networks, which may not be as immediately effective as the other options that provide more direct blocking capabilities. The other options typically have higher priority or are more specific in their blocking criteria.