Which object would an administrator create to block access to all high-risk applications?

The correct answer is D. application filter. An Application Filter (D) is a dynamic object that automatically groups applications based on attributes such as risk level, category, subcategory, or technology. An administrator creates a filter matching risk level 'high' and uses it in a deny Security policy rule - as new…

Submitted by devops_kid· Apr 18, 2026Managing Objects

Question

Options

AHIP profile
BVulnerability Protection profile
Capplication group
Dapplication filter

How the community answered

(47 responses)

B
4% (2)
C
6% (3)
D
89% (42)

Explanation

An Application Filter (D) is a dynamic object that automatically groups applications based on attributes such as risk level, category, subcategory, or technology. An administrator creates a filter matching risk level 'high' and uses it in a deny Security policy rule - as new high-risk applications are added to the App-ID database, they are automatically included without any manual update. An Application Group (C) is a static, manually maintained list of specific applications and would require constant updates. A HIP Profile (A) is for endpoint posture checking. A Vulnerability Protection profile (B) defends against exploits, not application access control.

Topics

#Application control#Application filter#Security policy objects#Application identification

Community Discussion

No community discussion yet for this question.

Full PCNSA Practice