Exam PCNSE topic 1 question 25 discussion

Actual exam question from Palo Alto Networks's PCNSE

Question #: 25
Topic #: 1

A web server is hosted in the DMZ, and the server is configured to listen for incoming connections only on TCP port 8080. A Security policy rule allowing access from the Trust zone to the DMZ zone need to be configured to enable we browsing access to the server.
Which application and service need to be configured to allow only cleartext web-browsing traffic to thins server on tcp/8080?

A. application: web-browsing; service: application-default
B. application: web-browsing; service: service-https
C. application: ssl; service: any
D. application: web-browsing; service: (custom with destination TCP port 8080)

Show Suggested Answer

Suggested Answer: D 🗳️

by shetoshandasa at March 14, 2021, 8:46 p.m.

Comments

Submit Cancel

nhema

Highly Voted 3 years, 7 months ago

https://docs.paloaltonetworks.com/pan-os/9-0/pan-os-new-features/app-id-features/app-default-strict.html Application default for web-browsing is port 80

upvoted 8 times

eyelasers1

2 years, 8 months ago

Also can be referenced based on web-browsing info from https://applipedia.paloaltonetworks.com/

upvoted 1 times

...

Marshpillowz

Most Recent 9 months, 2 weeks ago

Selected Answer: D

Correct answer is D

upvoted 1 times

...

nguyendtv50

1 year, 5 months ago

The correct answer is: Application: web-browsing Service: application-default Explanation: Since the server is listening on TCP port 8080, we need to use a custom service to specify this port. However, the question specifically asks for allowing only clear-text web-browsing traffic, which means HTTP traffic on port 8080. The 'web-browsing' application represents HTTP traffic, and the 'application-default' service includes TCP ports commonly used for HTTP traffic, including port 8080. Therefore, the correct configuration is to use the 'web-browsing' application and the 'application-default' service.

upvoted 2 times

...