Palo Alto Networks Certified Network Security Engineer (PCNSE)Core ConceptsEasy
A network security engineer is configuring a Palo Alto Networks firewall to allow users to access web applications while blocking known malicious sites. Which security profile should be applied to the security policy to achieve this?
- AVulnerability Protection Profile
- BURL Filtering Profile
- CFile Blocking Profile
- DData Filtering Profile
Show answer & explanationAnswer & explanation
Correct answer: B. URL Filtering Profile
To control access to specific websites and block malicious URLs, a URL Filtering Profile is the appropriate security profile. It allows for categorization-based blocking and custom URL lists.
Why the other options are wrong
- A. Vulnerability Protection Profile protects against exploits of known vulnerabilities.
- C. File Blocking Profile prevents the transfer of specific file types, not website access.
- D. Data Filtering Profile prevents sensitive data from leaving the network.
URL Filtering Profile
A security profile used to control and restrict user access to web content based on categories, custom URL lists, and other criteria.
- Blocks access to malicious or unwanted websites.
- Categorizes URLs for granular control.
- Can be customized with allowed and blocked URL lists.
Memory trick: URL Filtering is like a web bouncer, keeping bad sites out.