Palo Alto Networks Certified Network Security Administrator (PCNSA) — Question 40

The PowerBall Lottery has reached an unusually high value this week. Your company has decided to raise morale by allowing employees to access the PowerBall
Lottery website (www.powerball.com) for just this week. However, the company does not want employees to access any other websites also listed in the URL filtering `gambling` category.
Which method allows the employees to access the PowerBall Lottery website but without unblocking access to the `gambling` URL category?

Answer options

• A. Add just the URL www.powerball.com to a Security policy allow rule.
• B. Manually remove powerball.com from the gambling URL category.
• C. Add *.powerball.com to the URL Filtering allow list.
• D. Create a custom URL category, add *.powerball.com to it and allow it in the Security Profile.

Correct answer: A

Explanation

The correct answer is A because adding www.powerball.com to a Security policy allow rule specifically permits access to that site while keeping the gambling category blocked. Option B is incorrect as removing powerball.com from the gambling category would compromise the filtering. Option C is also wrong because using *.powerball.com could inadvertently allow other subdomains, and option D, while a viable method, is unnecessary when a direct allow rule suffices.