Palo Alto Networks Exam PSE-Platform Topic 1 Question 67 Discussion

Actual exam question for Palo Alto Networks's PSE-Platform exam

Question #: 67
Topic #: 1

[All PSE-Platform Questions]

What is a best practice when configuring a security policy to completely block a specific application?

AOne the Service/URL. Category tab, set the service to any

BOn the Actions tab, configure a file blocking security profile

COn the Service/URL. Category tab, set the service to application-default

DOn the Service/URL. Category tab, manually specify a port/service

Show Suggested Answer

Suggested Answer: A

by Galen at Aug 03, 2024, 10:31 PM

Limited Time Offer

25%

Off

Get Premium PSE-Platform Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Timothy

8 months ago

I agree with Hyman, setting the service to application-default is the most comprehensive approach

upvoted 0 times

...

Hyman

8 months ago

But setting the service to application-default will ensure all traffic for that application is blocked

upvoted 0 times

...

Leota

8 months ago

I disagree, I believe configuring a file blocking security profile is more effective

upvoted 0 times

...

Hyman

8 months ago

I think the best practice is to set the service to application-default

upvoted 0 times

...

Emmanuel

8 months ago

I personally think manually specifying a port/service on the Service/URL Category tab is the best way to completely block a specific application.

upvoted 0 times

...

Eun

9 months ago

Option C seems a bit too generic. 'application-default' could still leave some loopholes. Gotta be specific with security!

upvoted 0 times

...

My

9 months ago

Haha, Option A sounds like a classic 'cover all your bases' approach. Why not just block everything, right?

upvoted 0 times

Huey

8 months ago

I agree, better to be safe than sorry.

upvoted 0 times

...

Glen

8 months ago

Yeah, Option A seems like the safest bet.

upvoted 0 times

...

Graciela

9 months ago

But setting the service to application-default can ensure that all traffic for that application is blocked.

upvoted 0 times

...

Daniela

9 months ago

I'd go with Option D. Manually specifying the port/service seems more thorough than just setting it to 'any'.

upvoted 0 times

...

Adelina

9 months ago

I disagree, I believe configuring a file blocking security profile is more effective.

upvoted 0 times

...

Dulce

9 months ago

Option B looks like the way to go. Configuring a file blocking security profile sounds like the best way to completely block a specific application.

upvoted 0 times

Marsha

8 months ago

Yes, it's important to have a strong security policy in place to prevent any unauthorized applications from running on the network.

upvoted 0 times

...

Graham

8 months ago

I agree, using a file blocking security profile is a good practice to ensure that the specific application is completely blocked.

upvoted 0 times

...

Valentine

9 months ago

Option B looks like the way to go. Configuring a file blocking security profile sounds like the best way to completely block a specific application.

upvoted 0 times

...

Graciela

9 months ago

I think the best practice is to set the service to application-default.

upvoted 0 times

...