nerdexam
Palo_Alto_Networks

PSE-SASE · Question #39

Cloud-delivered App-ID provides specific identification of which two applications? (Choose two.)

The correct answer is A. unknown-tcp C. web-browsing. Cloud-delivered App-ID (App-ID Cloud Engine) uses machine learning in the cloud to refine identification of traffic that firewalls classify only generically - specifically unknown-tcp (A) and web-browsing (C). unknown-tcp represents TCP traffic the firewall cannot match to any…

Cloud-Delivered Security Services

Question

Cloud-delivered App-ID provides specific identification of which two applications? (Choose two.)

Options

  • Aunknown-tcp
  • Bprivate
  • Cweb-browsing
  • Dcustom

How the community answered

(31 responses)
  • A
    90% (28)
  • B
    3% (1)
  • D
    6% (2)

Explanation

Cloud-delivered App-ID (App-ID Cloud Engine) uses machine learning in the cloud to refine identification of traffic that firewalls classify only generically - specifically unknown-tcp (A) and web-browsing (C). unknown-tcp represents TCP traffic the firewall cannot match to any known application signature, while web-browsing is a catch-all for generic HTTP/HTTPS traffic not yet attributed to a specific app; cloud analysis can promote both into precise application identities.

Why the distractors are wrong:

  • B. private - This App-ID category flags traffic destined for RFC 1918 private IP space; it's a routing/addressing classification, not a target for cloud-based application refinement.
  • D. custom - Custom App-IDs are manually defined by administrators for proprietary internal apps; they are already explicitly identified and don't need cloud-based discovery.

Memory tip: Think of Cloud-delivered App-ID as a "promotion engine" - it promotes traffic that is either completely unnamed (unknown-tcp) or too broadly named (web-browsing) into something specific. If the traffic already has a meaningful label (private, custom), there's nothing left to promote.

Topics

#App-ID#cloud-delivered App-ID#application identification#unknown-tcp

Community Discussion

No community discussion yet for this question.

Full PSE-SASE Practice