PCNSA Question #235: Real Exam Question with Answer & Explanation

Question

What does an application filter help you to do?

Options

• AIt dynamically provides application statistics based on network, threat, and blocked activity,
• BIt dynamically filters applications based on critical, high, medium, low. or informational severity.
• CIt dynamically groups applications based on application attributes such as category and
• DIt dynamically shapes defined application traffic based on active sessions and bandwidth usage.

Explanation

An application filter dynamically groups applications based on their attributes, such as category, subcategory, and technology, streamlining the process of creating and maintaining security policies.

Common mistakes.

• A. Application filters are for defining sets of applications for policy, not for dynamically providing application statistics; logs and reports serve this purpose.
• B. While an application filter can use the 'risk' attribute, its primary function is not to filter based on a generic severity scale but on specific, defined application attributes.
• D. Application filters are for grouping applications for security policy enforcement, not for dynamic traffic shaping or bandwidth management, which are handled by Quality of Service (QoS) profiles.

Concept tested. Application filter functionality

Reference. https://docs.paloaltonetworks.com/pan-os/10-2/pan-os-admin/applications/application-filters-and-groups/create-an-application-filter

No community discussion yet for this question.