NETSEC-ANALYST · Question #186
Which Security policy match condition would an administrator use to block traffic from IP addresses on the Palo Alto Networks EDL of Known Malicious IP Addresses list?
The correct answer is B. source address. There are many ways to enforce web page access beyond only blocking and allowing certain sites. For example, you can use multiple categories per URL to allow users to access a site, but block particular functions like submitting corporate credentials or downloading files. You…
Question
Which Security policy match condition would an administrator use to block traffic from IP addresses on the Palo Alto Networks EDL of Known Malicious IP Addresses list?
Options
- Adestination address
- Bsource address
- Cdestination zone
- Dsource zone
How the community answered
(48 responses)- A4% (2)
- B71% (34)
- C10% (5)
- D15% (7)
Explanation
There are many ways to enforce web page access beyond only blocking and allowing certain sites. For example, you can use multiple categories per URL to allow users to access a site, but block particular functions like submitting corporate credentials or downloading files. You can also use URL categories to enforce different types of policy, such as Authentication, Decryption, QoS, https://docs.paloaltonetworks.com/pan-os/8-1/pan-os-admin/url-filtering/url-filtering-concepts/url- category-as-policy-match-criteria.html
Topics
Community Discussion
No community discussion yet for this question.