Exam PCNSA All QuestionsBrowse all questions from this exam
Question 165

URL categories can be used as match criteria on which two policy types? (Choose two.)

    Correct Answer: A, B

    URL categories can be used as match criteria for both authentication and decryption policy types. Authentication policies utilize URL categories to authenticate users before allowing access to certain web services, while decryption policies use them to determine whether traffic should be decrypted based on the URL's category. This allows for more granular control over web access and security measures within an organization.

Discussion
FireACACIAOptions: AB

The answers are correct. Source: https://docs.paloaltonetworks.com/pan-os/9-1/pan-os-admin/url-filtering/how-to-use-url-categories

OteslarOptions: AB

There are many ways to enforce web page access beyond only blocking and allowing certain sites. For example, you can use multiple categories per URL to allow users to access a site, but block particular functions like submitting corporate credentials or downloading files. You can also use URL categories to enforce different types of policy, such as Authentication, Decryption, QoS, and Security.

cjaceOptions: AB

Yes, you’re correctAuthentication policies can indeed use URL categories as match criteria12. In Palo Alto’s PAN-OS, Authentication policies are used to authenticate end users before they can access services and applications12. When configuring an Authentication policy, you can ensure that your Security Policy allows users to access the services and URL categories that require authentication1. Therefore, the correct answers are A. authentication and B. decryption.