Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions
Mail Us support@pass4success.com
Location US
Mob_nav_barsMENU

Palo Alto Networks PSE-Platform Exam - Topic 1 Question 67 Discussion

What is a best practice when configuring a security policy to completely block a specific application?
A) One the Service/URL. Category tab, set the service to any
B) On the Actions tab, configure a file blocking security profile
C) On the Service/URL. Category tab, set the service to application-default
D) On the Service/URL. Category tab, manually specify a port/service

Palo Alto Networks PSE-Platform Exam - Topic 1 Question 67 Discussion

Actual exam question for Palo Alto Networks's PSE-Platform exam
Question #: 67
Topic #: 1
[All PSE-Platform Questions]

What is a best practice when configuring a security policy to completely block a specific application?

Show Suggested Answer Hide Answer
Suggested Answer: A

by Galen at Aug 03, 2024, 10:31 PM

Limited Time Offer

25%

Off

Get Premium PSE-Platform Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

0/2000 characters
Submit Cancel
Luke
10 months ago
Surprised that people overlook the importance of file blocking!
upvoted 0 times
...
Zita
10 months ago
Wait, are we sure D is effective?
upvoted 0 times
...
Bronwyn
10 months ago
C seems like a solid choice too!
upvoted 0 times
...
Anjelica
11 months ago
I think A is better for blocking specific apps.
upvoted 0 times
...
Dick
11 months ago
Option B is definitely the way to go!
upvoted 0 times
...
Alyce
11 months ago
I’m leaning towards option A, but I recall something about the Actions tab being important too. It's confusing!
upvoted 0 times
...
An
11 months ago
I feel like manually specifying a port/service could work, but it seems less effective than using a predefined profile.
upvoted 0 times
...
Maricela
11 months ago
I remember a practice question where we had to configure a security profile, and I think that was related to file blocking. Could that be the answer here?
upvoted 0 times
...
Dominga
11 months ago
I think the best practice might be to set the service to application-default, but I'm not entirely sure if that's the right approach for blocking an app completely.
upvoted 0 times
...
Audra
11 months ago
I'm a little confused by this question. Blocking an application completely seems like it would require more than just configuring the service or URL category. I'll have to review my notes on security policy best practices to make sure I'm not missing something.
upvoted 0 times
...
Freeman
12 months ago
Okay, I've got this. The answer is B - configure a file blocking security profile on the Actions tab. That's the only option that specifically mentions blocking the application, so that's got to be the best practice.
upvoted 0 times
...
Desmond
12 months ago
Hmm, I'm a bit unsure about this one. I know we need to block the application, but I'm not sure if setting the service to "any" or "application-default" would actually block it completely. I'll have to think this through carefully.
upvoted 0 times
...
Rima
12 months ago
This looks like a straightforward security policy configuration question. I think the key is to completely block the application, so I'll focus on the options that mention blocking or file blocking.
upvoted 0 times
...
Cassie
12 months ago
This is a good one. I think the key is to manually specify the port or service on the Service/URL Category tab. That way, you can be sure the application is completely blocked, rather than relying on a generic setting.
upvoted 0 times
...
Ellsworth
12 months ago
Okay, I think I've got a strategy for this. I'll start by identifying which attributes match with each testing level, then select the option that best fits.
upvoted 0 times
...
Mendy
12 months ago
Okay, I've got this. A scatter diagram is definitely the right answer here - it's a tool that uses numbers to analyze the relationship between two variables. The other options don't seem as directly focused on quantitative analysis.
upvoted 0 times
...
Timothy
2 years ago
I agree with Hyman, setting the service to application-default is the most comprehensive approach
upvoted 0 times
...
Hyman
2 years ago
But setting the service to application-default will ensure all traffic for that application is blocked
upvoted 0 times
...
Leota
2 years ago
I disagree, I believe configuring a file blocking security profile is more effective
upvoted 0 times
...
Hyman
2 years ago
I think the best practice is to set the service to application-default
upvoted 0 times
...
Emmanuel
2 years ago
I personally think manually specifying a port/service on the Service/URL Category tab is the best way to completely block a specific application.
upvoted 0 times
...
Eun
2 years ago
Option C seems a bit too generic. 'application-default' could still leave some loopholes. Gotta be specific with security!
upvoted 0 times
...
My
2 years ago
Haha, Option A sounds like a classic 'cover all your bases' approach. Why not just block everything, right?
upvoted 0 times
Huey
2 years ago
I agree, better to be safe than sorry.
upvoted 0 times
...
Glen
2 years ago
Yeah, Option A seems like the safest bet.
upvoted 0 times
...
...
Graciela
2 years ago
But setting the service to application-default can ensure that all traffic for that application is blocked.
upvoted 0 times
...
Daniela
2 years ago
I'd go with Option D. Manually specifying the port/service seems more thorough than just setting it to 'any'.
upvoted 0 times
...
Adelina
2 years ago
I disagree, I believe configuring a file blocking security profile is more effective.
upvoted 0 times
...
Dulce
2 years ago
Option B looks like the way to go. Configuring a file blocking security profile sounds like the best way to completely block a specific application.
upvoted 0 times
Marsha
2 years ago
Yes, it's important to have a strong security policy in place to prevent any unauthorized applications from running on the network.
upvoted 0 times
...
Graham
2 years ago
I agree, using a file blocking security profile is a good practice to ensure that the specific application is completely blocked.
upvoted 0 times
...
Valentine
2 years ago
Option B looks like the way to go. Configuring a file blocking security profile sounds like the best way to completely block a specific application.
upvoted 0 times
...
...
Graciela
2 years ago
I think the best practice is to set the service to application-default.
upvoted 0 times
...

Save Cancel