Get Unlimited Contributor Access to the all ExamTopics Exams!
Take advantage of PDF Files for 1000+ Exams along with community discussions and pass IT Certification Exams Easily.
'B' is correct answer according PCNSA Study Guide 2020, p.131
After a packet has been allowed by the Security policy, Security Profiles are used to scan packets for threats, vulnerabilities, viruses, spyware, malicious URLs, data exfiltration, and exploitation software.
Security policy rules allow or block traffic in network, while security profiles scans the applications for threats, such as viruses, malware, spyware, and DDOS attacks. So the answer B is correct as the traffic will need to be allowed first for security profiles scans
While security policy rules enable you to allow or block traffic on your network, security profiles help you define an allow but scan rule, which scans allowed applications for threats, such as viruses, malware, spyware, and DDOS attacks
B is correct. Remember the Security Policy at the end of the Policy must be set to Allow, then you can add additional policies to check prior to allowing the traffic.
Of course is B the right answer.
Took the PAN-EDU-210 a few weeks ago the course material says so as well as ->
https://docs.paloaltonetworks.com/pan-os/10-2/pan-os-admin/policy/security-profiles
While security policy rules enable you to allow or block traffic on your network, security profiles help you define an allow but scan rule, which scans allowed applications for threats, such as viruses, malware, spyware, and DDOS attacks. When traffic matches the allow rule defined in the security policy, the security profile(s) that are attached to the rule are applied for further content inspection rules such as antivirus checks and data filtering.
I feel like this is a trick question. The statement says "A Security profile can BLOCK OR ALLOW traffic ......", so why if B only says allow would it be correct over D which says allows or blocks?
Security profiles are applied to allowed traffic by the security policy rule. It has no sense to apply a security profile on a policy rule that denies traffic.
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
Angel123
Highly Voted 3 years agonabilzay
Highly Voted 3 years, 4 months agoSnookerloopy
Most Recent 2 months, 3 weeks agoRivand
7 months agoclaudio392
8 months, 2 weeks agoAaronyukin
8 months, 3 weeks agovigoras
11 months, 4 weeks agoall_nicknames_are_taken
1 year, 1 month agoNajmmm
1 year, 2 months agoNajmmm
1 year, 2 months agoargyris23
1 year, 3 months agodaytonadave2011
1 year, 3 months agoDDisGR8
1 year, 8 months agoseb_berlin
1 year, 9 months agoscanossa
1 year, 10 months agoGerza27
1 year, 11 months agokewokil120
1 year, 11 months agojjb1989
1 year, 11 months agoLetrange
1 year, 11 months ago