Exam PCNSE All Questions

View all questions & answers for the PCNSE exam

Exam PCNSE topic 1 question 362 discussion

Actual exam question from Palo Alto Networks's PCNSE

Question #: 362
Topic #: 1

An administrator is required to create an application-based Security policy rule to allow Evernote. The Evernote application implicitly uses SSL and web browsing.
What is the minimum the administrator needs to configure in the Security rule to allow only Evernote?

A. Create an Application Override using TCP ports 443 and 80.
B. Add the HTPP, SSL, and Evernote applications to the same Security policy.
C. Add the Evernote application to the Security policy rule, then add a second Security policy rule containing both HTTP and SSL.
D. Add only the Evernote application to the Security policy rule.

Show Suggested Answer

Suggested Answer: D 🗳️

by Alen at Oct. 18, 2022, 10:57 a.m.

Comments

Submit Cancel

CarlosDV06

5 months, 1 week ago

Selected Answer: D

Both SSL and Web Browsing are IMPLICIT apps for Evernote. That means that only using Evernote as the allowed app will be ok for Evernote traffic. If they were EXPLICIT applications, then you would need to add SSL and WB within the same rule.

upvoted 1 times

...

Marshpillowz

11 months ago

Selected Answer: D

Answer is D

upvoted 1 times

...

Metgatz

1 year ago

Option D - implicitly Ssl - Web

upvoted 1 times

...

techplus

1 year, 3 months ago

Selected Answer: D

When adding the application Evernote, it will automatically populate the SSL and Web-Browsing dependencies, as tried in the lab.

upvoted 1 times

...

Nawda

1 year, 3 months ago

Selected Answer: D

implicitly: depend on other applications but you don't need to allow it. explicitly: you need to allow the other application it depends on to work as expected [add it to the same rule.] https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClV0CAK

upvoted 3 times

...

mercysayno765

1 year, 6 months ago

Selected Answer: D

https://live.paloaltonetworks.com/t5/blogs/what-is-application-dependency/ba-p/344330

upvoted 2 times

...

playthegamewithme

1 year, 6 months ago

The correct answer is D Evernote as an application is not depended on other applications. The Evernote sub applications are depended on other application like SSL or HTTPS https://applipedia.paloaltonetworks.com/

upvoted 1 times

...

bhupen5565

1 year, 9 months ago

It's D

upvoted 1 times

...

DenskyDen

1 year, 11 months ago

D. you do not have to explicitly allow access to the dependent applications for the traffic to flow because the firewall is able to determine the dependencies and allow them implicitly. This implicit support also applies to custom applications that are based on HTTP & SSL.

upvoted 3 times

...

TAKUM1y

2 years, 2 months ago

Selected Answer: D

https://docs.paloaltonetworks.com/pan-os/10-2/pan-os-admin/app-id/applications-with-implicit-support

upvoted 4 times

Alen

2 years, 2 months ago

ok this makes sense. defintely the correct answer

upvoted 2 times

...

mysteryzjoker

2 years, 2 months ago

It's D. If it "depends on" they would need adding.

upvoted 1 times

...

west33637

2 years, 2 months ago

Selected Answer: D

D is correct. For the Evernote App, Palo already has implicit support for SSL and Web browsing. https://docs.paloaltonetworks.com/pan-os/9-1/pan-os-admin/app-id/applications-with-implicit-support

upvoted 1 times

...