Palo Alto Networks Certified Network Security Administrator (PCNSA) — Question 67

Assume a custom URL Category Object of `NO-FILES` has been created to identify a specific website.
How can file uploading/downloading be restricted for the website while permitting general browsing access to that website?

Answer options

• A. Create a Security policy with a URL Filtering profile that references the site access setting of block to NO-FILES.
• B. Create a Security policy that references NO-FILES as a URL Category qualifier with an appropriate File Blocking profile.
• C. Create a Security policy with a URL Filtering profile that references the site access setting of continue to NO-FILES.
• D. Create a Security policy that references NO-FILES as a URL Category qualifier with an appropriate Data Filtering profile.

Correct answer: B

Explanation

The correct answer is B because it allows you to define restrictions specifically for file uploads and downloads while still permitting general access to the website. Options A and C do not focus on file blocking, and option D is not designed for controlling file transfers specifically, making them inappropriate choices for this requirement.