NETSEC-ANALYST · Question #66
A security administrator has configured App-ID updates to be automatically downloaded and installed. The company is currently using an application identified by App-ID as SuperApp_base. On a content…
The correct answer is A. All traffic matching the SuperApp_chat, and SuperApp_download is denied because it no longer. To allow the new applications, we need to modify or add a new policy. https://docs.paloaltonetworks.com/pan-os/9-0/pan-os-admin/app-id/manage-new-app-ids- introduced-in-content-releases/review-new-app-id-impact-on-existing-policy-rules
Question
A security administrator has configured App-ID updates to be automatically downloaded and installed. The company is currently using an application identified by App-ID as SuperApp_base. On a content update notice, Palo Alto Networks is adding new app signatures labeled SuperApp_chat and SuperApp_download, which will be deployed in 30 days. Based on the information, how is the SuperApp traffic affected after the 30 days have passed?
Options
- AAll traffic matching the SuperApp_chat, and SuperApp_download is denied because it no longer
- BNo impact because the apps were automatically downloaded and installed
- CNo impact because the firewall automatically adds the rules to the App-ID interface
- DAll traffic matching the SuperApp_base, SuperApp_chat, and SuperApp_download is denied until
How the community answered
(49 responses)- A84% (41)
- B4% (2)
- C2% (1)
- D10% (5)
Explanation
To allow the new applications, we need to modify or add a new policy. https://docs.paloaltonetworks.com/pan-os/9-0/pan-os-admin/app-id/manage-new-app-ids- introduced-in-content-releases/review-new-app-id-impact-on-existing-policy-rules
Topics
Community Discussion
No community discussion yet for this question.