ExamTopics Logo
Mail Us[email protected]
Menu
Palo-Alto-Networks Discussions
exam questions

Exam PCNSE All Questions

View all questions & answers for the PCNSE exam
Go to Exam

Exam PCNSE topic 1 question 505 discussion

Actual exam question from Palo Alto Networks's PCNSE
Question #: 505
Topic #: 1
[All PCNSE Questions]

An organization is interested in migrating from their existing web proxy architecture to the Web Proxy feature of their PAN-OS 11.0 firewalls. Currently, HTTP and SSL requests contain the destination IP address of the web server and the client browser is redirected to the proxy.

Which PAN-OS proxy method should be configured to maintain this type of traffic flow?

  • A. SSL forward proxy
  • B. Explicit proxy
  • C. Transparent proxy
  • D. DNS proxy
Show Suggested Answer Hide Answer
Suggested Answer: C 🗳️
by samqq at March 17, 2023, 11:52 p.m.

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Submit Cancel
Spaz_6
Highly Voted 2 years, 4 months ago
Selected Answer: C
Destination ip is proxy means explicit. Destination ip is server means transparent
upvoted 18 times
elemzy
7 months, 4 weeks ago
Wont the proxy server always do a redirection, even if the destination IP is the original webserver? A debug should reveal a 301 move, especially if the request is the server IP address. I think the key is the browser configuration which is redirected to proxy. I think answer is B, though the question was meant to confuse readers.
upvoted 3 times
...
...
samqq
Highly Voted 2 years, 4 months ago
Selected Answer: C
For the transparent proxy method, the request contains the destination IP address of the web server and the proxy transparently intercepts the client request (either by being in-line or by traffic steering). There is no client configuration and Panorama is optional. Transparent proxy requires a loopback interface, User-ID configuration in the proxy zone, and specific Destination NAT (DNAT) rules. Transparent proxy does not support X-Authenticated Users (XAU) or Web Cache Communications Protocol (WCCP). https://docs.paloaltonetworks.com/pan-os/11-0/pan-os-new-features/networking-features/web-proxy
upvoted 6 times
...
zaho5
Most Recent 5 months ago
Selected Answer: B
https://docs.paloaltonetworks.com/pan-os/11-0/pan-os-new-features/networking-features/web-proxy
upvoted 1 times
...
stephenw13
5 months ago
Selected Answer: C
For the transparent proxy method, the request contains the destination IP address of the web server and the proxy transparently intercepts the client request (either by being in-line or by traffic steering)
upvoted 1 times
...
CarlosDV06
5 months, 3 weeks ago
Selected Answer: C
Bros, at first (and I remember I got this question on the exam, took it on August 13th 2024 - 2nd failure). In explicit proxy, you would send the traffic explicitly to the web proxy, this means, that you'd be aware of the web proxy connection. However, this question states that the petition is sent to the web server (not proxy). The web browser transparently sends the petition to the proxy and there you go.
upvoted 1 times
...
HappyDay030303
7 months, 2 weeks ago
Selected Answer: B
the client browser is explicitly configured
upvoted 2 times
...
Bau24
1 year ago
Selected Answer: C
C - Transparent For the transparent proxy method, the request contains the destination IP address of the WEB SERVER
upvoted 1 times
...
ali_sh85
1 year ago
Selected Answer: B
3.6.2 Explicit proxy For the explicit proxy method, the request contains the destination IP address of the configured proxy and the client browser sends requests to the proxy directly
upvoted 4 times
...
Marshpillowz
1 year, 5 months ago
Selected Answer: C
C is correct
upvoted 1 times
...
Andromeda1800
1 year, 7 months ago
Selected Answer: C
C is correct. "destination IP address of the web server"
upvoted 1 times
...
brian7857ffs45
1 year, 7 months ago
This question was on the exam.. Nov 2023
upvoted 2 times
...
Betty2022
1 year, 12 months ago
Selected Answer: C
C: As per samqq's reference : For the transparent proxy method, the request contains the destination IP address of the web server and the proxy transparently intercepts the client request (either by being in-line or by traffic steering). There is no client configuration and Panorama is optional. Transparent proxy requires a loopback interface, User-ID configuration in the proxy zone, and specific Destination NAT (DNAT) rules. Transparent proxy does not support X-Authenticated Users (XAU) or Web Cache Communications Protocol (WCCP). https://docs.paloaltonetworks.com/pan-os/11-0/pan-os-new-features/networking-features/web-proxy
upvoted 2 times
...
rom007
2 years ago
Selected Answer: B
client browser is redirected to the proxy...mean it use pas file so explicit proxy if you ti maintain this type of traffic flow
upvoted 2 times
...
kinho1985
2 years, 1 month ago
B. Explicit proxy.
upvoted 3 times
...
ConfuzedOne
2 years, 1 month ago
Selected Answer: C
As per samqq's reference
upvoted 1 times
...
kewokil120
2 years, 4 months ago
Selected Answer: C
C is correct
upvoted 1 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel