nerdexam
Palo_Alto_Networks

PCNSE7 · Question #47

Only two Trust to Untrust allow rules have been created in the Security policy - Rule1 allows google-base - Rule2 allows youtube-base The youtube-base App-ID depends on google-base to function. The…

The correct answer is C. Add the DNS App-ID to Rule2. See the full explanation below for the reasoning.

Question

Only two Trust to Untrust allow rules have been created in the Security policy

  • Rule1 allows google-base
  • Rule2 allows youtube-base

The youtube-base App-ID depends on google-base to function. The google-base App-ID implicitly browser, they get an error indecating that the server cannot be found. Which action will allow youtube.com display in the browser correctly?

Options

  • AAdd SSL App-ID to Rule1
  • BCreate an additional Trust to Untrust Rule, add the web-browsing, and SSL App-ID's to it
  • CAdd the DNS App-ID to Rule2
  • DAdd the Web-browsing App-ID to Rule2

How the community answered

(29 responses)
  • A
    10% (3)
  • B
    3% (1)
  • C
    83% (24)
  • D
    3% (1)

Community Discussion

No community discussion yet for this question.

Full PCNSE7 Practice