Palo Alto Networks System Engineer – Strata — Question 84

Which two actions should be taken to provide some protection when a client chooses not to block uncategorized websites? (Choose two.)

Answer options

• A. Add a URL-filtering profile with the action set to "Continue" for unknown URL categories attached to Security policy rules that allow web access.
• B. Attach a file-blocking profile to Security policy rules that allow uncategorized websites.
• C. Add a Security policy rule using only known URL categories with the action set to "Allow."
• D. Attach a data-filtering profile with a custom data pattern to Security policy rules that deny uncategorized websites.

Correct answer: A, B

Explanation

Option A is correct because adding a URL-filtering profile with a 'Continue' action allows monitoring of unknown categories while still providing some access. Option B is also correct as a file-blocking profile can help prevent harmful files from being downloaded from uncategorized sites. Options C and D are incorrect because they either limit access to only known categories or deny access to uncategorized websites altogether, which does not align with the client's choice to allow them.