Palo Alto Networks Certified Network Security Administrator (PCNSA) — Question 99

The PowerBall Lottery has reached a high payout amount and a company has decided to help employee morale by allowing employees to check the number, but doesn't want to unblock the gambling URL category.
Which two methods will allow the employees to get to the PowerBall Lottery site without the company unlocking the gambling URL category? (Choose two.)

Answer options

• A. Add all the URLs from the gambling category except powerball.com to the block list and then set the action for the gambling category to allow.
• B. Manually remove powerball.com from the gambling URL category.
• C. Add *.powerball.com to the allow list
• D. Create a custom URL category called PowerBall and add *.powerball.com to the category and set the action to allow.

Correct answer: C, D

Explanation

The correct answers are C and D because adding *.powerball.com to the allow list (C) and creating a custom URL category (D) both enable access to the PowerBall Lottery site without unblocking other gambling sites. Options A and B do not provide a viable method to access powerball.com while maintaining the block on other gambling URLs.