Palo Alto Networks Certified Network Security Engineer (PCNSE) — Question 443

A firewall engineer reviews the PAN-OS GlobalProtect application and sees that it implicitly uses web-browsing and depends on SSL.

When creating a new rule, what is needed to allow the application to resolve dependencies?

Answer options

• A. Add SSL application to the same rule.
• B. SSL and web-browsing must both be explicitly allowed.
• C. Add SSL and web-browsing applications to the same rule.
• D. Add web-browsing application to the same rule.

Correct answer: A

Explanation

The correct answer is A because adding the SSL application to the rule allows GlobalProtect to function without explicitly allowing both SSL and web-browsing. Options B and C are incorrect as they require unnecessary explicit permissions that are not needed for the application to resolve its dependencies. Option D is also incorrect because it only addresses web-browsing, neglecting the essential SSL component.