nerdexam
Palo_Alto_Networks

PCNSA · Question #296

An administrator needs to allow users to use only certain email applications. How should the administrator configure the firewall to restrict users to specific email applications?

The correct answer is C. Create an application group and add the email applications to it.. An Application Group allows an administrator to manually select and add specific named applications (e.g., gmail, yahoo-mail, outlook-web-access) into a reusable group. This gives precise control - only those exact applications are permitted. An Application Filter (A or B) dynami

Submitted by ashley.k· Apr 18, 2026Configure

Question

An administrator needs to allow users to use only certain email applications. How should the administrator configure the firewall to restrict users to specific email applications?

Options

  • ACreate an application filter and filter it on the collaboration category.
  • BCreate an application filter and filter it on the collaboration category, email subcategory.
  • CCreate an application group and add the email applications to it.
  • DCreate an application group and add the email category to it.

How the community answered

(18 responses)
  • A
    6% (1)
  • C
    83% (15)
  • D
    11% (2)

Explanation

An Application Group allows an administrator to manually select and add specific named applications (e.g., gmail, yahoo-mail, outlook-web-access) into a reusable group. This gives precise control - only those exact applications are permitted. An Application Filter (A or B) dynamically matches all applications sharing a category/subcategory attribute, which would allow ALL email subcategory apps including ones not intended. Answer D is invalid because application groups contain specific applications or other groups, not categories. Since the goal is to allow only CERTAIN email apps, an application group with specific selections is the correct and most precise approach.

Topics

#Application Control#Application Groups#Security Policies#Granular Application Filtering

Community Discussion

No community discussion yet for this question.

Full PCNSA Practice