Question 35: NetSec-Analyst: Palo Alto Networks Certified Network Security Analyst

A company requires that all employees connecting through GlobalProtect VPN are allowed access only to approved web browsing and email applications. These sessions must undergo strict content inspection, and user access must be authenticated based on their Active Directory group membership. Which Security policy configuration meets these requirements?

1. A. Configure GlobalProtect split tunneling to provide access to web browsing and email applications through the GlobalProtect Gateway, override the default interzone policy action to allow, and attach the strict security profile group.
2. B. Configure a User-ID Access profile on the source zone, use App-ID to provide access to approved applications, and attach the strict security profile group.
3. C. Configure a source user group to authorize GlobalProtect users, use App-ID to provide access to only the approved applications, and attach a best practice security profile group.
4. D. Configure group mapping to authorize GlobalProtect users, use App-ID to restrict access to only email-base and web browsing applications, and attach a best practice security profile group. — đáp án hiện tại