Which statement best describes a common use of Policy Optimizer?

The correct answer is A. Policy Optimizer can display which Security policies have not been used in the last 90 days. Policy Optimizer's primary use is to help administrators identify and clean up unnecessary or inefficient security policies. Displaying policies that have not matched any traffic in the last 90 days (A) is its most common and well-known function, allowing administrators to…

Submitted by tunde_lagos· Apr 18, 2026Policy Evaluation and Management

Question

Options

APolicy Optimizer can display which Security policies have not been used in the last 90 days
BPolicy Optimizer on a VM-50 firewall can display which Layer 7 App-ID Security policies have
CPolicy Optimizer can add or change a Log Forwarding profile for each Security policy selected.
DPolicy Optimizer can be used on a schedule to automatically create a disabled Layer 7 App-ID

How the community answered

(23 responses)

A
96% (22)
D
4% (1)

Explanation

Policy Optimizer's primary use is to help administrators identify and clean up unnecessary or inefficient security policies. Displaying policies that have not matched any traffic in the last 90 days (A) is its most common and well-known function, allowing administrators to safely remove stale rules. Option B is incorrect because Policy Optimizer on a VM-50 does not specifically track Layer 7 App-ID policy usage differently. Option C (modifying log forwarding profiles) and D (automatically creating disabled rules on a schedule) are not functions of Policy Optimizer.

Topics

#Policy Optimizer#Security Policies#Policy Management#Policy Optimization

Community Discussion

No community discussion yet for this question.

Full PCNSA Practice