PCNSC · Question #52
An administrator sees several inbound sessions identified as unknown tcp in the Traffic logs. The administrator determines that these sessions are from external users accessing the company's…
The correct answer is D. Create a custom App-ID and enable scanning on the advanced tab. https://docs.paloaltonetworks.com/pan-os/10-0/pan-os-admin/app-id/manage-custom-or- unknown-applications.html
Question
An administrator sees several inbound sessions identified as unknown tcp in the Traffic logs. The administrator determines that these sessions are from external users accessing the company's propriety accounting application. The administrator wants to reliability identity this as their accounting application and to scan this traffic for threats. Which option would achieve this result?
Options
- ACreate an Application Override policy and a custom threat signature for the application.
- BCreate a custom App-ID and use the "ordered condition cheek box.
- CCreate an Application Override policy
- DCreate a custom App-ID and enable scanning on the advanced tab.
How the community answered
(33 responses)- A3% (1)
- B18% (6)
- C9% (3)
- D70% (23)
Explanation
https://docs.paloaltonetworks.com/pan-os/10-0/pan-os-admin/app-id/manage-custom-or- unknown-applications.html
Topics
Community Discussion
No community discussion yet for this question.