Exam PCNSA All QuestionsBrowse all questions from this exam
Question 14

Employees are shown an application block page when they try to access YouTube. Which security policy is blocking the YouTube application?

    Correct Answer: D

    The 'interzone-default' policy is blocking the YouTube application. In Palo Alto Networks firewalls, the 'interzone-default' rule is a predefined security rule that blocks all traffic between different zones unless explicitly allowed by other rules. The rule applies to traffic that does not match any other rules listed above it. Given that YouTube is not explicitly blocked by the other specified rules, such as 'Deny Google' which targets Google Docs-related applications, the 'interzone-default' rule will apply and deny access, resulting in the block page for YouTube.

Discussion
Cyril_the_SquirlOption: D

D is Correct.

Angel123Option: D

D is indeed correct answer. You can check application categories on: https://applipedia.paloaltonetworks.com/

error_909Option: D

The answer is D inter-zone default.

BobylyOption: D

Yes D. I tested on my LAB the answer B can't block youtube.

LordScorpiusOption: D

Google is in a completely different classification than YouTube, owned or not. Also, there is no dependency in AppID. Answer: D

edwinchiOption: D

D is correct, why? Interzone default applies here; it is a predefined security rule in Palo Alto Networks firewalls that block all traffic between different zones. It is displayed at the bottom of the security rule base and can be overridden by a user-defined rule. The interzone-default rule has a deny action and applies to any traffic that does not match any other rule in the rule list.

RivandOption: D

The default Rule

CHICCONUMBER1Option: D

D is correct. Remember Security Policies are a match condition, and then action is applied to the matching traffic.

scanossaOption: D

D is correct, B will filter Google Docs only

j4v13rh4ackOption: D

D works

kewokil120Option: D

D is correct

xeonsynOption: D

D is correct because this is google-doc base not google base

RameshKakuOption: B

B- Because Youtube depends on Google-base

delorean

The application on the policy is google-docs-base. As it is different from google-base, B cannot be the right answer. D is correct