Palo_Alto_Networks
NETSEC-ANALYST · Question #160
Given the network diagram, traffic should be permitted for both Trusted and Guest users to access general Internet and DMZ servers using SSH, web-browsing and SSL applications. Which policy achieves…
Sign in or unlock NETSEC-ANALYST to reveal the answer and full explanation for question #160. The question stem and answer options stay visible for context.
Security Policy Management
Question
Given the network diagram, traffic should be permitted for both Trusted and Guest users to access general Internet and DMZ servers using SSH, web-browsing and SSL applications. Which policy achieves the desired results? A. B. C. D.
Exhibits
Options
- ANAME TAGS TYPE ZONE ADDRESS USER DEVICE ZONE ADDRESS DEVICE APPLICATION SERVICE 03-A none universal TRUST 172.16.16.0/24 any any DMZ 1.1.1.0/24 any ssh app 192.16.0.0/24 web-browsing ssl
- BNAME TAGS TYPE ZONE ADDRESS USER DEVICE ZONE ADDRESS DEVICE APPLICATION SERVICE 04-A none universal IOT-Guest 172.16.16.0/24 any any DMZ any ssh app TRUST 192.16.0.0/24 Untrust web-browsing ssl
- CNAME TAGS TYPE ZONE ADDRESS USER DEVICE ZONE ADDRESS DEVICE APPLICATION SERVICE 01-A none universal TRUST 172.16.16.0/24 any any DMZ 1.1.1.0/24 any ssh app 172.16.12.0/24 Untrust 192.16.0.0/24 web-browsing ssl
- DNAME TAGS TYPE ZONE ADDRESS USER DEVICE ZONE ADDRESS DEVICE APPLICATION SERVICE 02-A none universal IOT-Guest 172.16.16.0/24 any any DMZ 1.1.1.0/24 any ssh app TRUST 192.16.0.0/24 Untrust 192.16.0.0/24 web-browsing ssl
Unlock NETSEC-ANALYST to see the answer
You've previewed enough free NETSEC-ANALYST questions. Unlock NETSEC-ANALYST for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.
Topics
#multi-zone policy#source zone grouping#application policy#trusted and guest users