exam questions

Exam PCNSE All Questions

View all questions & answers for the PCNSE exam

Exam PCNSE topic 1 question 527 discussion

Actual exam question from Palo Alto Networks's PCNSE
Question #: 527
Topic #: 1
[All PCNSE Questions]

An organization conducts research on the benefits of leveraging the Web Proxy feature of PAN-OS 11.0.

What are two benefits of using an explicit proxy method versus a transparent proxy method? (Choose two.)

  • A. No client configuration is required for explicit proxy, which simplifies the deployment complexity.
  • B. Explicit proxy supports interception of traffic using non-standard HTTPS ports.
  • C. It supports the X-Authenticated-User (XAU) header, which contains the authenticated username in the outgoing request.
  • D. Explicit proxy allows for easier troubleshooting, since the client browser is aware of the existence of the proxy.
Show Suggested Answer Hide Answer
Suggested Answer: CD 🗳️

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
brian7857ffs45
Highly Voted 1 year, 5 months ago
This question was on the exam.. Nov 2023
upvoted 5 times
...
scanossa
Most Recent 1 year, 2 months ago
This question was on the exam Mar/01/24
upvoted 3 times
...
Marshpillowz
1 year, 3 months ago
Selected Answer: CD
C and ad correct
upvoted 2 times
...
Pnosuke
1 year, 4 months ago
B & C is correct
upvoted 1 times
...
sov4
1 year, 9 months ago
Selected Answer: CD
CD absolutely. A and B isnt true... that would be transparent. C is true... it's in the documentation. D is also true because in it's nature an explicit proxy is "explicitly" defined on the users machine.
upvoted 2 times
...
PaloSteve
1 year, 9 months ago
The following limitations apply for on-premises Explicit Proxy: - On-premises Explicit Proxy does not support multi-tenancy. - On-premises Explicit Proxy supports authentication using SAML and Kerberos. - On-premises Explicit Proxy requires decryption (TLS 1.3 is recommended). - On-premises Explicit Proxy requires port 8080. - On-premises Explicit Proxy requires PAC files to direct traffic to the on-premises Explicit Proxy. - On-premises Explicit Proxy supports customer-based hosting for their individual PAC files. - On-premises Explicit Proxy supports inbound proxy chaining with XFF and XAU HTTP headers. - On-premises Explicit Proxy supports HTTP/2 for Kerberos only; HTTP/2 for SAML is not supported in this release. From https://docs.paloaltonetworks.com/pan-os/11-0/pan-os-release-notes/limitations/limitations-in-pan-os-11-0. This does not mention anything about Prisma or Prisma Access proxy limitations.
upvoted 1 times
...
Knowledge33
1 year, 10 months ago
Selected Answer: CD
C&D, It's easy.
upvoted 2 times
...
Pochex
1 year, 10 months ago
C and D are correct: Confirm C at https://docs.paloaltonetworks.com/prisma/prisma-access/prisma-access-cloud-managed-admin/secure-mobile-users-with-prisma-access/explicit-proxy/explicit-proxy-how-it-works Confirm D at https://docs.paloaltonetworks.com/pan-os/11-0/pan-os-new-features/networking-features/web-proxy
upvoted 3 times
...
BryanSalazar
1 year, 11 months ago
The PA DoC clearly says "There is no client configuration and Panorama is optional" & "Transparent proxy does not support X-Authenticated Users (XAU) "which clearly means that A&D is the correct one, https://docs.paloaltonetworks.com/pan-os/11-0/pan-os-new-features/networking-features/web-proxy
upvoted 2 times
nebulanerd
10 months, 2 weeks ago
I'm really sorry to say that you're wrong, my friend. As mlj23 already told you, thank you so much, mlj23! It's totally okay! We're all here reviewing our study together. It's always a good idea to double-check before posting, just to be sure!
upvoted 1 times
...
mlj23
1 year, 10 months ago
Correct for transparent proxy, but the question is asking for explicit proxy. CD
upvoted 2 times
mlj23
1 year, 10 months ago
Hit too send too soon...A is absolutely not correct as explicit proxy does require client config.
upvoted 2 times
...
...
...
mercysayno765
1 year, 11 months ago
Selected Answer: CD
I think it's C and D. https://docs.paloaltonetworks.com/pan-os/11-0/pan-os-new-features/networking-features/web-proxy
upvoted 2 times
...
abanaaba
1 year, 11 months ago
Selected Answer: CD
That is my choice
upvoted 2 times
[Removed]
1 year, 11 months ago
Based on what? Please send some artilcle or document. This is not the correct way to express your opinion. :)
upvoted 2 times
...
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago