Exam PCNSA topic 1 question 8 discussion

Ans is B and C. Look at the wording of the question: "ACTIONS(eg Block, Allow etc) can be set for WHICH TWO ITEMS in a URL filtering security profile?" The question is NOT worded like: "WHAT Actions can be set for items in a URL filtering security profile?" Hence the correct answers are B & C.

I believe B & C are the correct answers. Starting from panos v.9 url override (that's where allow and deny lists were) is removed from the url profile and only categories are used...

Block Access to or from Known-Bad URLs: Two methods are available to block access to risky URL categories. The first method is to add the URL categories as match conditions to a Security policy deny rule. URL categories can be used as matching criteria in Security, QoS, Decryption, and Authentication policy. The second method is to control access to URL categories using a URL Filtering Profile attached to a Security policy "allow" rule. Options: A e D.

B. Custom URL Categories C. PAN-DB URL Categories These categories allow the administrator to control access to specific URLs and categories of URLs. Actions such as block, alert, continue, override, or allow can be set for these categories based on the organization’s security policy.

Found on Palo Alto site: Answer is A: Block List and D: Allow List From most strict to least strict, possible URL Filtering profile actions are: block, override, continue, alert, and allow. https://docs.paloaltonetworks.com/advanced-url-filtering/administration/url-filtering-basics/url-filtering-profiles

Allow List = explicitly allow the urls can not change action action Block list= explicitly block urls can not change action So ans is BC

B and C

A, D: https://docs.paloaltonetworks.com/pan-os/10-1/pan-os-admin/url-filtering/url-categories/url-filtering-profile-actions

I believe the answer is B & C based on PAN's website (https://docs.paloaltonetworks.com/advanced-url-filtering/administration/url-filtering-basics/url-categories). You don't find allow/block lists spoken of, only Custom, Predefined, Malicious, and Security Focused. You create custom yourself, but PAN-DB does the other three.

It can't be "Allow List" and "Block List" as actions cannot be associated to 'lists' therefore it is B and C.

A. Block List,D Allow list

B&C are correct

Ans is B and C.

See @ciscoSannin comment. The question is asking for Action on WHICH ITEMS.A and D are actions not Items

B & C are Correct.

People saying A and D misread the question. It's not asking for which ACTIONS but which ITEMS.

The correct answer is (A,D), you can make sure in paloalto > objects > security profile > URL Filtering