What are two differences between an implicit dependency and an explicit dependency in App-ID? (Choose two.)

Question

Options

• AAn implicit dependency does not require the dependent application to be added in the security
• BAn implicit dependency requires the dependent application to be added in the security policy
• CAn explicit dependency does not require the dependent application to be added in the security
• DAn explicit dependency requires the dependent application to be added in the security policy

• A
  91% (50)
• B
  5% (3)
• C
  4% (2)

Explanation

In Palo Alto Networks App-ID, application dependencies define relationships between applications that require other applications to function. An implicit dependency means PAN-OS automatically allows the dependent (underlying) application without requiring it to be explicitly listed in a security policy rule - the firewall handles it transparently to maintain the allowed application's functionality. An explicit dependency means the administrator must manually add the dependent application to the security policy rule; PAN-OS will not automatically permit it. Therefore: Statement A is correct (implicit dependency = dependent app does NOT need to be added to the policy). Statement D is correct (explicit dependency = dependent app DOES need to be added to the policy). Statements B and C are the logical inverses of the correct behavior and are therefore false.

No community discussion yet for this question.