Examice

Exam PCNSE All QuestionsBrowse all questions from this exam

Question 33

An administrator needs to determine why users on the trust zone cannot reach certain websites. The only information available is shown on the following image.

Which configuration change should the administrator make?

Correct Answer:

The administrator needs to determine why users on the trust zone cannot reach certain websites categorized under 'gambling'. The detailed log view shows that the action being taken for these sites is 'block-url' due to the category 'gambling'. To resolve this issue, the administrator should modify the URL filtering profile to allow access to websites categorized as 'gambling'. Therefore, the correct configuration change would be to modify the 'gambling' category's Site Access setting from 'block' to 'allow'. This is indicated in the second image (B), where the Site Access for 'gambling' is changed to 'Allow' from 'Block'. This change will permit users to access websites categorized under 'gambling'. Thus, the correct answer is to configure the URL Filtering Profile as shown in option B.

Discussion

frodo1791

B is correct... the question is talking about "certain websites", options D and E are talking about just one specific website.

datz

ITS B, certain websites/Category needs to be whitelisted. They want to Gamble. Let them Gamble lol

Pochex

Answer B would be the best option since it is allowing 'gambling'. Answer A is part of a session id, there is no way to configure it. Answer C refers to the policy name, and should not affect anything. Answers D and E display config no longer available in PANOS 9.0 and higher I don't believe this question would be included in the current PCNSE exam.

428cd48

Horribly formulated question. Confusing.

Frightened_Acrobat

All of these answers are wrong. This question was for PAN-OS before 9.0. https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA14u0000008UtaCAE&lang=en_US%E2%80%A9 In PAN-OS 9, and above, this is how to add a URL exception: To configure exceptions to URL categories, you can create a custom URL category ( GUI: Objects > Custom Objects > URL Category). This question in no way should be on the exam, but if it was, B could be the only viable solution.

lol12

Should be A. First screenshot Log View with the issue. Second screenshot should labelled as A

Chris71Mach1

A log view isn't a configuration change. (A) is unfortunately the most incorrect answer available.

DriVen

Another super dumb question...of course you need to allow gambling for all your employees, I mean why not... xD

nhema

First of all, A should be the exhibit… besides that: B will allow the whole gambling category

anak1n

so then it should be D not A, A is just showing the log itself, B indeed it will allow the whole gambling that's why in URL filtering you will set this website to CONTINUE not Block

petersummer

It's mentioned certain sites, so B will allow all whole category of sites, not only one that is shown on D. B is correct

rocioha

I think is E, because of the block option

Marshpillowz

B is correct

DriVen

IN addition, the logic here is bizzare...the question asks "An administrator needs to determine why"...THIS has already been determined..why? Well obviously, because it's a blocked category, so logically speaking there is no right answer here

Biz90

I believe this is B based on the block action for the credentials. As this will block a user if they are required to use credentials to access a page for example a login/webform etc.

Narendragpt

Answer is B . The question is asking certain websites are not accessible so only B is correct option to fulfill the requirement here .