The compliance officer requests that all evasive applications need to be blocked on all perimeter firewalls out to the internet The firewall is configured with two zones; 1. trust for internal networks 2. untrust to the internet Based on the capabilities of the Palo Alto Networks NGFW, what are two ways to configure a security policy using App-ID to comply with this request? (Choose two )

Question

Sonjoy Kanwal · Accepted Answer

Create a deny rule at the top of the policy from trust to untrust over any service and select evasive as the application

Sonjoy Kanwal · Accepted Answer

Create a deny rule at the top of the policy from trust to untrust with service application-default and add an application filter with the evasive characteristic

Sonjoy Kanwal · Answer

Create a deny rule at the top of the policy from trust to untrust with service application-default and select evasive as the application.

Sonjoy Kanwal · Answer

Create a deny rule at the top of the policy from trust to untrust over any service and add an application filter with the evasive characteristic.

Question list

List of questions

Question 1

(0)

Question 2

(0)

Question 3

(0)

Question 4

(0)

Question 5

(0)

Question 6

(0)

Question 7

(0)

Question 8

(0)

Question 9

(0)

Question 10

(0)

Related questions

Question 203 - PCNSA discussion

Suggested answer: A, D

0 comments