PCNSE · Question #851
A firewall engineer is migrating port-based rules to application-based rules by using the Policy Optimizer. The engineer needs to ensure that the new application-based rules are future-proofed, and…
The correct answer is D. Add the relevant container application when creating cloned rules. Using Policy Optimizer to migrate to application-based rules, adding the container application (Option D) ensures future-proofing. Container apps (e.g., "web-browsing") include child apps (e.g., specific web services) as signatures evolve, maintaining rule accuracy without…
Question
A firewall engineer is migrating port-based rules to application-based rules by using the Policy Optimizer. The engineer needs to ensure that the new application-based rules are future-proofed, and that they will continue to match if the existing signatures for a specific application are expanded with new child applications. Which action will meet the requirement while ensuring that traffic unrelated to the specific application is not matched?
Options
- ACreate a custom application and define it by the correct TCP and UDP ports
- BCreate an application filter based on the existing application category and risk
- CAdd specific applications that are seen when creating cloned rules
- DAdd the relevant container application when creating cloned rules
How the community answered
(26 responses)- A4% (1)
- B12% (3)
- C4% (1)
- D81% (21)
Explanation
Using Policy Optimizer to migrate to application-based rules, adding the container application (Option D) ensures future-proofing. Container apps (e.g., "web-browsing") include child apps (e.g., specific web services) as signatures evolve, maintaining rule accuracy without over- matching unrelated traffic.
Topics
Community Discussion
No community discussion yet for this question.