An administrator would like to use App-ID's deny action for an application and would like that action updated with dynamic updates as new content becomes available. Which security policy action…

The correct answer is C. Deny. The 'Deny' action is unique: instead of using a fixed behavior, it defers to the application's default deny action as defined in the App-ID content database (e.g., reset-client, reset-server, reset-both, or drop). Because that default deny action is stored in the content…

Submitted by priya_blr· Apr 18, 2026Policy Evaluation and Management

Question

An administrator would like to use App-ID's deny action for an application and would like that action updated with dynamic updates as new content becomes available. Which security policy action causes this?

Options

AReset server
BReset both
CDeny
DDrop

How the community answered

(34 responses)

A
3% (1)
B
3% (1)
C
94% (32)

Explanation

The 'Deny' action is unique: instead of using a fixed behavior, it defers to the application's default deny action as defined in the App-ID content database (e.g., reset-client, reset-server, reset-both, or drop). Because that default deny action is stored in the content database, it is automatically updated whenever Palo Alto Networks releases new App-ID content updates. Explicit actions like Drop, Reset Server, and Reset Both are static - they are hardcoded into the policy rule and do not change when content updates are applied.

Topics

#App-ID#Security Policy#Dynamic Updates#Policy Actions

Community Discussion

No community discussion yet for this question.

Full PCNSA Practice