Palo Alto Networks Certified Network Security Engineer (PCNSE) — Question 312

Four configuration choices are listed, and each could be used to block access to a specific URL.

If you configured each choice to block the same URL, then which choice would be evaluated last in the processing order to block access to the URL?

Answer options

• A. Custom URL category in URL Filtering profile
• B. PAN-DB URL category in URL Filtering profile
• C. EDL in URL Filtering profile
• D. Custom URL category in Security policy rule

Correct answer: B

Explanation

The PAN-DB URL category in the URL Filtering profile is evaluated last because it is considered the most comprehensive and up-to-date source for URL categorization. The other options, while effective, are processed earlier in the evaluation order, making them less authoritative in this context.