Palo_Alto_Networks
PCNSE7 · Question #47
PCNSE7 Question #47: Real Exam Question with Answer & Explanation
The correct answer is C. Add the DNS App-ID to Rule2. See the full explanation below for the reasoning.
Question
Only two Trust to Untrust allow rules have been created in the Security policy - Rule1 allows google-base - Rule2 allows youtube-base The youtube-base App-ID depends on google-base to function. The google-base App-ID implicitly browser, they get an error indecating that the server cannot be found. Which action will allow youtube.com display in the browser correctly?
Options
- AAdd SSL App-ID to Rule1
- BCreate an additional Trust to Untrust Rule, add the web-browsing, and SSL App-ID's to it
- CAdd the DNS App-ID to Rule2
- DAdd the Web-browsing App-ID to Rule2
Community Discussion
No community discussion yet for this question.