PCNSA · Question #378
What are two differences between an application group and an application filter? (Choose two.)
The correct answer is A. Application groups enable access to sanctioned applications explicitly, while application filters B. Application groups are static, while application filters are dynamic. Application groups are static collections of specific applications, typically used to explicitly allow sanctioned applications, whereas application filters dynamically group applications based on predefined attributes and criteria.
Question
What are two differences between an application group and an application filter? (Choose two.)
Options
- AApplication groups enable access to sanctioned applications explicitly, while application filters
- BApplication groups are static, while application filters are dynamic.
- CApplication groups dynamically group applications based on attributes, while application filters
- DApplication groups can be added to application filters, while application filters cannot be added to
How the community answered
(31 responses)- A94% (29)
- C3% (1)
- D3% (1)
Why each option
Application groups are static collections of specific applications, typically used to explicitly allow sanctioned applications, whereas application filters dynamically group applications based on predefined attributes and criteria.
Application groups are used to explicitly define a set of applications that are permitted or denied, usually for sanctioned applications. Application filters, conversely, are used to define a set of applications based on attributes to control categories of applications rather than specific ones.
Application groups are static; they contain a fixed list of applications chosen by the administrator. Application filters are dynamic; they automatically include applications that match the defined criteria (e.g., category, subcategory, technology), meaning the list of applications can change as new applications are identified or attributes updated.
This statement inverts the definitions: application filters dynamically group applications based on attributes, while application groups are static collections.
Application groups can be included within an application filter, but application filters cannot be added directly to application groups.
Concept tested: Application groups vs. application filters
Source: https://docs.paloaltonetworks.com/pan-os/10-2/pan-os-admin/app-id/application-groups-and-filters
Topics
Community Discussion
No community discussion yet for this question.