Exam PCNSA All QuestionsBrowse all questions from this exam
Question 15

Choose the option that correctly completes this statement. A Security Profile can block or allow traffic ____________.

    Correct Answer: B

    A Security Profile operates after traffic has been allowed by a security policy rule. This means that traffic must first be permitted by the security policy before a Security Profile can be applied to scan for threats, vulnerabilities, and other malicious activities. This ensures that only allowed traffic is subjected to these additional scans and inspections.

Discussion
Angel123Option: B

'B' is correct answer according PCNSA Study Guide 2020, p.131 After a packet has been allowed by the Security policy, Security Profiles are used to scan packets for threats, vulnerabilities, viruses, spyware, malicious URLs, data exfiltration, and exploitation software.

nabilzayOption: B

B is the correct answer, the security policy has to allow the traffic for the security profile to take action

vigorasOption: B

B is correct answer.

Gerza27Option: B

B is correct answer! Of course!

vinicius27Option: B

I believe that is a 'B' is correct, and "D" not is the correct. https://docs.paloaltonetworks.com/pan-os/10-1/pan-os-admin/policy/security-profiles "Security Profiles are not used in the match criteria of a traffic flow. The Security Profile is applied to scan traffic after the application or category is allowed by the Security policy rule."

SnookerloopyOption: B

you dont put security profiles on a security policy that denies traffic

RivandOption: B

t's B. D is wrong, the Profile can only take actions if the traffic is allowed by the security policy rule.

claudio392Option: B

Of course B

AaronyukinOption: B

"B" is the Correct, as it is shown in the PCNSE exam questions.

all_nicknames_are_takenOption: B

B: https://docs.paloaltonetworks.com/pan-os/10-1/pan-os-admin/policy/security-profiles

NajmmmOption: B

Security policy rules allow or block traffic in network, while security profiles scans the applications for threats, such as viruses, malware, spyware, and DDOS attacks. So the answer B is correct as the traffic will need to be allowed first for security profiles scans

Najmmm

While security policy rules enable you to allow or block traffic on your network, security profiles help you define an allow but scan rule, which scans allowed applications for threats, such as viruses, malware, spyware, and DDOS attacks

argyris23Option: C

Definitely C!, if the security rule blocks the traffic it will never make it to the security profiles

daytonadave2011Option: B

B is correct. Remember the Security Policy at the end of the Policy must be set to Allow, then you can add additional policies to check prior to allowing the traffic.

DDisGR8Option: B

B is the correct answer

seb_berlinOption: B

Of course is B the right answer. Took the PAN-EDU-210 a few weeks ago the course material says so as well as -> https://docs.paloaltonetworks.com/pan-os/10-2/pan-os-admin/policy/security-profiles While security policy rules enable you to allow or block traffic on your network, security profiles help you define an allow but scan rule, which scans allowed applications for threats, such as viruses, malware, spyware, and DDOS attacks. When traffic matches the allow rule defined in the security policy, the security profile(s) that are attached to the rule are applied for further content inspection rules such as antivirus checks and data filtering.

scanossaOption: B

B is correct

kewokil120Option: B

B. Why would you put denied traffic through an IPS.