PCNSA · Question #223
Which object would an administrator create to enable access to all applications in the office- programs subcategory?
The correct answer is A. application filter. To enable access to all applications belonging to the 'office-programs' subcategory, an administrator should create an application filter.
Question
Which object would an administrator create to enable access to all applications in the office- programs subcategory?
Options
- Aapplication filter
- BURL category
- CHIP profile
- Dapplication group
How the community answered
(29 responses)- A86% (25)
- B7% (2)
- C3% (1)
- D3% (1)
Why each option
To enable access to all applications belonging to the 'office-programs' subcategory, an administrator should create an application filter.
An application filter allows for dynamic grouping of applications based on shared attributes like subcategory, risk, or technology, enabling policies to automatically include all applications matching the criteria, such as 'office-programs'.
A URL category is used for classifying web content and domains, not for grouping applications detected by App-ID.
A HIP profile is used for endpoint posture assessment with GlobalProtect, which is unrelated to grouping applications for policy enforcement.
An application group is a static collection of manually specified applications, requiring individual additions and updates, making it less dynamic and efficient than an application filter for a subcategory.
Concept tested: Application filter functionality
Source: https://docs.paloaltonetworks.com/pan-os/10-2/pan-os-admin/applications/application-filters-and-groups/create-an-application-filter
Topics
Community Discussion
No community discussion yet for this question.