Palo Alto Networks Network Security Analyst (NetSec-Analyst) Exam Materials - Question #32 Discussion

Comment Image Comment Image Comment Image

A security administrator is building out Decryption policies and wants to decrypt according to Palo Alto Networks best practices. Which URL categories should the administrator add to the policies? (Choose one answer)

  • A. Proxy avoidance and anonymizers, ransomware, unknown, web-based email, web advertisements, and not resolved
  • B. Newly registered domains, internet communications and telephony, high-risk URL, insufficient content, hacking, and grayware
  • C. Online storage and backup, web-based email, web hosting, personal sites and blogs, content delivery networks, and high-risk URL
  • D. AI website generator, Command and Control, compromised website, encrypted DNS, and dynamic DNS
Correct Answer: C

Brave-Dump Community Votes

Answer: C (1 vote) 100%

Community Explanations & Comments (1)

Anonymous User 5 months ago
Selected: C
correct answer is C

reference -> https://docs.paloaltonetworks.com/best-practices/10-2/decryption-best-practices/decryption-best-practices/deploy-ssl-decryption-using-best-practices#:~:text=Always%20decrypt%20the%20online%2Dstorage%2Dand%2Dbackup%2C%20web%2Dbased%2Demail%2C%20web%2Dhosting%2C%20personal%2Dsites%2Dand%2Dblogs%2C%20content%2Ddelivery%2Dnetworks%2C%20and%20high%2Drisk%20URL%20categories

"Always decrypt the online-storage-and-backup, web-based-email, web-hosting, personal-sites-and-blogs, content-delivery-networks, and high-risk URL categories."