nerdexam
Palo_Alto_Networks

PCNSE · Question #739

In the New App Viewer under Policy Optimizer, what does the compare option for a specific rule allow an administrator to compare?

The correct answer is C. Applications configured in the rule with applications seen from traffic matching the same rule. In Policy Optimizer's New App Viewer, the 'Compare' option for a rule shows the applications currently listed in the rule's configuration side-by-side with the applications actually observed in traffic that matched that rule over the reporting period. This helps administrators…

Submitted by haruto_sh· Apr 18, 2026Operate

Question

In the New App Viewer under Policy Optimizer, what does the compare option for a specific rule allow an administrator to compare?

Options

  • AApplications configured in the rule with their dependencies
  • BThe security rule with any other security rule selected
  • CApplications configured in the rule with applications seen from traffic matching the same rule
  • DThe running configuration with the candidate configuration of the firewall

How the community answered

(23 responses)
  • B
    9% (2)
  • C
    87% (20)
  • D
    4% (1)

Explanation

In Policy Optimizer's New App Viewer, the 'Compare' option for a rule shows the applications currently listed in the rule's configuration side-by-side with the applications actually observed in traffic that matched that rule over the reporting period. This helps administrators see which apps are allowed by policy versus which are actively being used, enabling informed decisions about tightening or updating the rule with more specific App-IDs. It does not compare rules against each other (Choice B), compare app dependencies (Choice A), or compare config states (Choice D).

Topics

#Policy Optimizer#App-ID#Security Policies#Traffic Visibility

Community Discussion

No community discussion yet for this question.

Full PCNSE Practice