nerdexam
Palo_Alto_Networks

PCNSA · Question #378

What are two differences between an application group and an application filter? (Choose two.)

The correct answer is A. Application groups enable access to sanctioned applications explicitly, while application filters B. Application groups are static, while application filters are dynamic. Application groups are static collections of specific applications, typically used to explicitly allow sanctioned applications, whereas application filters dynamically group applications based on predefined attributes and criteria.

Submitted by andreas_gr· Apr 18, 2026Managing Objects

Question

What are two differences between an application group and an application filter? (Choose two.)

Options

  • AApplication groups enable access to sanctioned applications explicitly, while application filters
  • BApplication groups are static, while application filters are dynamic.
  • CApplication groups dynamically group applications based on attributes, while application filters
  • DApplication groups can be added to application filters, while application filters cannot be added to

How the community answered

(31 responses)
  • A
    94% (29)
  • C
    3% (1)
  • D
    3% (1)

Why each option

Application groups are static collections of specific applications, typically used to explicitly allow sanctioned applications, whereas application filters dynamically group applications based on predefined attributes and criteria.

AApplication groups enable access to sanctioned applications explicitly, while application filtersCorrect

Application groups are used to explicitly define a set of applications that are permitted or denied, usually for sanctioned applications. Application filters, conversely, are used to define a set of applications based on attributes to control categories of applications rather than specific ones.

BApplication groups are static, while application filters are dynamic.Correct

Application groups are static; they contain a fixed list of applications chosen by the administrator. Application filters are dynamic; they automatically include applications that match the defined criteria (e.g., category, subcategory, technology), meaning the list of applications can change as new applications are identified or attributes updated.

CApplication groups dynamically group applications based on attributes, while application filters

This statement inverts the definitions: application filters dynamically group applications based on attributes, while application groups are static collections.

DApplication groups can be added to application filters, while application filters cannot be added to

Application groups can be included within an application filter, but application filters cannot be added directly to application groups.

Concept tested: Application groups vs. application filters

Source: https://docs.paloaltonetworks.com/pan-os/10-2/pan-os-admin/app-id/application-groups-and-filters

Topics

#Application Groups#Application Filters#App-ID#Security Policies

Community Discussion

No community discussion yet for this question.

Full PCNSA Practice