Palo_Alto_Networks
PCNSA · Question #267
All users from the internal zone must be allowed only HTTP access to a server in the DMZ zone. Complete the empty field in the Security policy using an application object to permit only this type of…
The correct answer is B. Application = "web-browsing". http is not an application but service, the web-browsing cab be http/https.
Submitted by layla.eg· Apr 18, 2026Securing Traffic
Question
All users from the internal zone must be allowed only HTTP access to a server in the DMZ zone. Complete the empty field in the Security policy using an application object to permit only this type of access. Source Zone: Internal Destination Zone: DMZ Zone Application: __________ Service: application-default Action: allow
Options
- AApplication = "any"
- BApplication = "web-browsing"
- CApplication = "ssl"
- DApplication = "http"
How the community answered
(16 responses)- B88% (14)
- C6% (1)
- D6% (1)
Explanation
http is not an application but service, the web-browsing cab be http/https.
Topics
#App-ID#Security Policy#Application Control#Web Protocols
Community Discussion
No community discussion yet for this question.