Exam PCNSE All Questions

View all questions & answers for the PCNSE exam

Exam PCNSE topic 1 question 442 discussion

Actual exam question from Palo Alto Networks's PCNSE

Question #: 442
Topic #: 1

Four configuration choices are listed, and each could be used to block access to a specific URL.

If you configured each choice to block the same URL, then which choice would be evaluated last in the processing order to block access to the URL?

A. Custom URL category in URL Filtering profile
B. PAN-DB URL category in URL Filtering profile
C. EDL in URL Filtering profile
D. Custom URL category in Security policy rule

Show Suggested Answer

Suggested Answer: B 🗳️

by mz101 at Nov. 27, 2022, 10:57 p.m.

Comments

Submit Cancel

scanossa

Highly Voted 1 year ago

but, isn´t it true that in the moment one of them has a Block action it will stop looking in the rest of them? and all of them are set to Block. In that case the first one to look will also be the last.

upvoted 5 times

NullNull88

4 months, 2 weeks ago

I would read it one more time.

upvoted 1 times

...

Marshpillowz

Most Recent 11 months ago

Selected Answer: B

Answer is B

upvoted 1 times

...

avator

1 year ago

PAN-DB URL category in URL Filtering profile. does that mean predefined URL profile ?

upvoted 1 times

...

DenskyDen

1 year, 10 months ago

Selected Answer: B

See comments below.

upvoted 3 times

...

djedeen

1 year, 11 months ago

Selected Answer: B

Addt info from PAN (B is correct): Precedence for URL filtering ========================== Block list - Manually entered blocked URLs Allow list - Manually entered allowed URLs Custom Categories - User-defined Custom URL Categories Cached - Cached = URLs learned from External Dynamic Lists (EDLs) Pre-Defined Categories - PAN-DB or Brightcloud "canned" / "out of the box" categories. https://live.paloaltonetworks.com/t5/general-topics/understanding-url-filtering-order-url-filtering-precedence/td-p/238682

upvoted 4 times

...

evdw

2 years ago

Correct answer is B The priority for URL filtering is: 1. block list 2. allow list 3.custom categories 4.cached 5.pre-defined categories https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClsmCAC

upvoted 4 times

...

19216855

2 years ago

Selected Answer: B

B as ms101 and confusion

upvoted 3 times

...

confusion

2 years, 1 month ago

Selected Answer: B

B mz101's link says: " block list allow list custom categories cached pre-defined categories "

upvoted 3 times

...

mz101

2 years, 1 month ago

B should be the answer: https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClsmCAC D is not correct, because security policy is checked "before" any security profiles, including URL filtering profile.

upvoted 3 times

...