Exam PCNSA topic 1 question 111 discussion

Actual exam question from Palo Alto Networks's PCNSA

Question #: 111
Topic #: 1

The PowerBall Lottery has reached an unusually high value this week. Your company has decided to raise morale by allowing employees to access the PowerBall
Lottery website (www.powerball.com) for just this week. However, the company does not want employees to access any other websites also listed in the URL filtering `gambling` category.
Which method allows the employees to access the PowerBall Lottery website but without unblocking access to the `gambling` URL category?

A. Add just the URL www.powerball.com to a Security policy allow rule.
B. Manually remove powerball.com from the gambling URL category.
C. Add *.powerball.com to the URL Filtering allow list.
D. Create a custom URL category, add *.powerball.com to it and allow it in the Security Profile.

Show Suggested Answer

Suggested Answer: A 🗳️

by Micutzu at May 5, 2021, 10:49 a.m.

Comments

Submit Cancel

not_so_free

9 months, 3 weeks ago

Selected Answer: D

Vague question. You cant "just" add url into security policy, you have to create fqdn object beforehand. C or D make more sense to me; D if I must choose one...

upvoted 1 times

...

MoSayel

1 year, 2 months ago

Selected Answer: A

Q51) The PowerBall Lottery has reached a high payout amount and a company has decided to help employee morale by allowing employees to check the number, but doesn't want to unblock the gambling URL category. in Q111) it mentioned the lottery website itself (www.powerball.com) Answer is A here..

upvoted 1 times

...

Calica

1 year, 7 months ago

Creo que es la D.

upvoted 3 times

...

swotmastaflex

1 year, 8 months ago

Selected Answer: CD

this is the same as question 51, just missing the "choose two" answers intthe instructions. Therfore, the two options that make sense and are consistent with question 51 would be C and D

upvoted 4 times

...

TheLorenz

2 years ago

A is not correct as you cannot add www.powerball.com to a security policy unless you first create an address object and add the fqdn. A does not mention doing any of this.

upvoted 1 times

...