PCNSA App-ID and Content-ID Practice Question

Drag and drop the steps to configure a URL filtering profile on a Palo Alto Networks firewall into the correct order.

Drag steps to the numbered slots on the right, or tap a step then tap a slot.

Steps

Order

1Step 1

2Step 2

3Step 3

4Step 4

5Step 5

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

✓

Create URL filtering profile, then configure SSL decryption, then apply the profile to a security policy, then test and verify.

URL filtering profile involves categories, actions, policy attachment, SSL decryption, and testing.

Answer analysis

For each option: why learners choose it and why it is or isn't the right answer here.

✓
Create URL filtering profile, then configure SSL decryption, then apply the profile to a security policy, then test and verify.
Why this is correct
This is the correct order because you must first define the URL categories and actions in the profile, then enable SSL decryption to inspect HTTPS traffic, then attach the profile to a security policy, and finally test to ensure it works as expected.
✗
Create URL filtering profile, then apply the profile to a security policy, then configure SSL decryption, then test and verify.
Why it's wrong here
This is incorrect because SSL decryption must be configured before applying the URL filtering profile to a security policy. If HTTPS traffic is not decrypted, URL filtering will not inspect encrypted URLs, leading to ineffective filtering.
✗
Configure SSL decryption, then apply the profile to a security policy, then create URL filtering profile, then test and verify.
Why it's wrong here
This is incorrect because you cannot apply a URL filtering profile that hasn't been created yet. The profile must exist before it can be attached to a security policy.
✗
Test and verify, then create URL filtering profile, then configure SSL decryption, then apply the profile to a security policy.
Why it's wrong here
This is incorrect because testing should occur after all configuration steps are completed. Testing before creating the profile or applying it to a policy would not validate the actual URL filtering functionality.

Go deeper