Welcome to ExamTopics
ExamTopics Logo
- Expert Verified, Online, Free.

Unlimited Access

Get Unlimited Contributor Access to the all ExamTopics Exams!
Take advantage of PDF Files for 1000+ Exams along with community discussions and pass IT Certification Exams Easily.

Exam PCNSE topic 1 question 48 discussion

Actual exam question from Palo Alto Networks's PCNSE
Question #: 48
Topic #: 1
[All PCNSE Questions]

Which Security policy rule will allow an admin to block facebook chat but allow Facebook in general?

  • A. Deny application facebook-chat before allowing application facebook
  • B. Deny application facebook on top
  • C. Allow application facebook on top
  • D. Allow application facebook before denying application facebook-chat
Show Suggested Answer Hide Answer
Suggested Answer: A 🗳️
Reference:
https://live.paloaltonetworks.com/t5/Configuration-Articles/Failed-to-Block-Facebook-Chat-Consistently/ta-p/115673

Comments

Chosen Answer:
This is a voting comment (?) , you can switch to a simple comment.
Switch to a voting comment New
rajputparveen
Highly Voted 4 years ago
A correct
upvoted 17 times
...
NNgiggs
Highly Voted 2 years, 7 months ago
Allowing Facebook will allow all its dependents including Facebook chat. therefore, you will need to block Facebook chat before the allow Facebook below it. A is the correct answer.
upvoted 6 times
...
bing2021
Most Recent 3 days, 3 hours ago
Selected Answer: A
before allow fb base
upvoted 1 times
...
Marshpillowz
5 months, 2 weeks ago
Selected Answer: A
A is the correct answer
upvoted 1 times
...
Spippolo
1 year, 4 months ago
Selected Answer: A
A is correct
upvoted 2 times
...
aatechler
1 year, 5 months ago
Selected Answer: A
A >>>>Just tested on my LAB. Deny Face chat Allow Facebook and DNS
upvoted 5 times
...
PANW
1 year, 6 months ago
Selected Answer: D
The answer is D: PANW firewalls do application shifting so it can transition from Facebook-base to facebook-chat and allow everything facebook accept chat I tried it in my lab with rule order as in answer D: and everything works accept Facebook messenger I disabled the deny rule and messenger started working again Proof is in the pudding
upvoted 2 times
sujss
1 year, 5 months ago
But the answer D doesn't really mean allowing everything except chat, it simply says allow FB before denying chat( as far as I understand), meaning 2 separate rules.So if the traffic matches a certain rule the firwall will stop processing the traffic further so would it be able to identify facebook chat when the application shifts. I might be incorrect please help to clarify this. ( the answers might not have been properly worded here adding to the confusion).
upvoted 1 times
...
...
yazid0016
1 year, 6 months ago
A is correct
upvoted 1 times
...
JMIB
1 year, 11 months ago
A is correct
upvoted 2 times
...
UFanat
2 years ago
Selected Answer: A
A is correct
upvoted 2 times
...
Kane002
2 years, 7 months ago
C. facebook-chat is dependent on facebook, and must be explicitly allowed. Therefore, permit facebook only, and facebook-chat will fall to the interzone default of deny.
upvoted 2 times
Breyarg
2 years, 6 months ago
if you allow facebook as a parent app then it will allow all sub apps incliding facebook chat. your answer and logic is incorrect. correct answer is A. you Deny the facebok chat, then allow all of facebook after.
upvoted 4 times
...
...
zjam
2 years, 11 months ago
correct
upvoted 2 times
...
Pag0s
3 years, 4 months ago
A is correct
upvoted 3 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...
ex Want to SAVE BIG on Certification Exam Prep?
close
ex Unlock All Exams with ExamTopics Pro 75% Off
  • arrow Choose From 1000+ Exams
  • arrow Access to 10 Exams per Month
  • arrow PDF Format Available
  • arrow Inline Discussions
  • arrow No Captcha/Robot Checks
Limited Time Offer
Ends in