nerdexam
Palo_Alto_Networks

PCNSA · Question #235

What does an application filter help you to do?

The correct answer is C. It dynamically groups applications based on application attributes such as category and. An application filter dynamically groups applications based on their attributes, such as category, subcategory, and technology, streamlining the process of creating and maintaining security policies.

Submitted by yuriko_h· Apr 18, 2026Managing Objects

Question

What does an application filter help you to do?

Options

  • AIt dynamically provides application statistics based on network, threat, and blocked activity,
  • BIt dynamically filters applications based on critical, high, medium, low. or informational severity.
  • CIt dynamically groups applications based on application attributes such as category and
  • DIt dynamically shapes defined application traffic based on active sessions and bandwidth usage.

How the community answered

(30 responses)
  • A
    3% (1)
  • B
    3% (1)
  • C
    93% (28)

Why each option

An application filter dynamically groups applications based on their attributes, such as category, subcategory, and technology, streamlining the process of creating and maintaining security policies.

AIt dynamically provides application statistics based on network, threat, and blocked activity,

Application filters are for defining sets of applications for policy, not for dynamically providing application statistics; logs and reports serve this purpose.

BIt dynamically filters applications based on critical, high, medium, low. or informational severity.

While an application filter can use the 'risk' attribute, its primary function is not to filter based on a generic severity scale but on specific, defined application attributes.

CIt dynamically groups applications based on application attributes such as category andCorrect

An application filter allows for the dynamic grouping of applications by leveraging their various attributes like category, subcategory, technology, and risk, which simplifies policy creation and ensures policies remain current without manual updates for new applications.

DIt dynamically shapes defined application traffic based on active sessions and bandwidth usage.

Application filters are for grouping applications for security policy enforcement, not for dynamic traffic shaping or bandwidth management, which are handled by Quality of Service (QoS) profiles.

Concept tested: Application filter functionality

Source: https://docs.paloaltonetworks.com/pan-os/10-2/pan-os-admin/applications/application-filters-and-groups/create-an-application-filter

Topics

#Application Filters#Application-ID#Security Policy

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full PCNSA Practice