Palo_Alto_Networks
PCNSE7 · Question #181
PCNSE7 Question #181: Real Exam Question with Answer & Explanation
Sign in or unlock PCNSE7 to reveal the answer and full explanation for question #181. The question stem and answer options stay visible for context.
Question
An administrator sees several inbound sessions identified as unknown-tcp in the Traffic logs. The administrator determines that these sessions are form external users accessing the company's proprietary accounting application. The administrator wants to reliably identify this traffic as their accounting application and to scan this traffic for threats. Which option would achieve this result?
Options
- ACreate a custom App-ID and enable scanning on the advanced tab.
- BCreate an Application Override policy.
- CCreate a custom App-ID and use the "ordered conditions" check box.
- DCreate an Application Override policy and custom threat signature for the application.
Unlock PCNSE7 to see the answer
You've previewed enough free PCNSE7 questions. Unlock PCNSE7 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.