Palo Alto Networks Certified Network Security Administrator (PCNSA) — Question 380

An administrator wants to enable access to www.paloaltonetworks.com while denying access to all other sites in the same category.

Which object should the administrator create to use as a match condition for the security policy rule that allows access to www.paloaltonetworks.com?

Answer options

• A. Service
• B. Address
• C. URL category
• D. Application group

Correct answer: C

Explanation

The correct answer is C, URL category, as it allows the administrator to specify which websites within a particular category can be accessed. Options A (Service), B (Address), and D (Application group) do not specifically address the requirement to control access based on a URL category, making them unsuitable for this scenario.