What are two best practices for incorporating new and modified App-IDs? (Choose two.)

The correct answer is B. Configure a security policy rule to allow new App-IDs that might have network-wide impact D. Study the release notes and install new App-IDs if they are determined to have low impact. When new or modified App-IDs are released in a content update, two best practices apply: (B) Create a temporary security policy rule above your existing rules that explicitly allows the new App-IDs - this prevents unintended traffic drops for applications that may now be identifi

Submitted by ngozi_ng· Apr 18, 2026Operate

Question

Options

ARun the latest PAN-OS version in a supported release tree to have the best performance for the
BConfigure a security policy rule to allow new App-IDs that might have network-wide impact
CPerform a Best Practice Assessment to evaluate the impact of the new or modified App-IDs
DStudy the release notes and install new App-IDs if they are determined to have low impact

How the community answered

(60 responses)

A
5% (3)
B
92% (55)
C
3% (2)

Explanation

When new or modified App-IDs are released in a content update, two best practices apply: (B) Create a temporary security policy rule above your existing rules that explicitly allows the new App-IDs - this prevents unintended traffic drops for applications that may now be identified differently and have network-wide impact. (D) Study the release notes included with the content update to understand which App-IDs are new or changed, then install the update if the assessed impact is low. This informed, staged approach avoids disruption. Running the latest PAN-OS (A) is generally good practice but not specific to App-ID incorporation. Performing a BPA (C) is valuable for overall posture but is not an App-ID-specific incorporation practice.

Topics

#App-ID#Security Policy#Best Practices#Content Updates

Community Discussion

No community discussion yet for this question.

Full PCNSE Practice