A network administrator is trying to prevent domain username and password submissions to phishing sites on some allowed URL categories Which set of steps does the administrator need to take in the URL Filtering profile to prevent credential phishing on the firewall?

To prevent the submission of corporate credentials to specific URL categories, an administrator must configure a URL Filtering profile. This involves two key steps. First, in the profile, for the desired URL categories, the action in the User Credential Submission column must be set to block. This action specifically controls the submission of credentials, not access to the site itself. Second, the firewall must be able to identify what constitutes a corporate credential. This is achieved by the Domain Credential Filter feature, which collects a benign hash representation of user credentials. The URL Filtering profile is then configured to use this information for detection.

B: IP User Mapping (User-ID) is a prerequisite that identifies the user on the network, but it is the Domain Credential Filter that provides the data needed to detect the corporate credentials themselves. C: Setting the action in the Site Access column to block would prevent users from visiting the websites entirely, rather than just preventing credential submission to them. D: The phrasing is imprecise. The setting to enable credential detection is located on the User Credential Detection tab within the URL Filtering profile, not in a general "URL filtering settings" section.

1. Palo Alto Networks Administrator's Guide (PAN-OS 10.2): Configure Credential Phishing Prevention.

This document outlines the entire process. It states

"To configure credential phishing prevention

you must first enable the firewall to detect corporate credential submissions... Then

in a URL Filtering profile

you specify the websites to which you want to control corporate credential submissions." This confirms the two-part process.

Under the section "Control Where Users Can Submit Credentials

" it details the use of the User Credential Submission column: "For each URL category

you can set the User Credential Submission action to allow

alert

block

or continue." This directly supports the first part of the correct answer.

2. Palo Alto Networks Administrator's Guide (PAN-OS 10.2): Objects > Security Profiles > URL Filtering.

This section describes the components of a URL Filtering profile. It shows that credential submission control is a distinct column from site access

reinforcing why option C is incorrect. It also describes the User Credential Detection tab

where the check is enabled

making option A's reference to this tab more accurate than option D's general reference. The feature on this tab relies on the data gathered by the Domain Credential Filter.