PSE-SASE · Question #39
Cloud-delivered App-ID provides specific identification of which two applications? (Choose two.)
The correct answer is A. unknown-tcp C. web-browsing. Cloud-delivered App-ID (App-ID Cloud Engine) uses machine learning in the cloud to refine identification of traffic that firewalls classify only generically - specifically unknown-tcp (A) and web-browsing (C). unknown-tcp represents TCP traffic the firewall cannot match to any…
Question
Cloud-delivered App-ID provides specific identification of which two applications? (Choose two.)
Options
- Aunknown-tcp
- Bprivate
- Cweb-browsing
- Dcustom
How the community answered
(31 responses)- A90% (28)
- B3% (1)
- D6% (2)
Explanation
Cloud-delivered App-ID (App-ID Cloud Engine) uses machine learning in the cloud to refine identification of traffic that firewalls classify only generically - specifically unknown-tcp (A) and web-browsing (C). unknown-tcp represents TCP traffic the firewall cannot match to any known application signature, while web-browsing is a catch-all for generic HTTP/HTTPS traffic not yet attributed to a specific app; cloud analysis can promote both into precise application identities.
Why the distractors are wrong:
- B. private - This App-ID category flags traffic destined for RFC 1918 private IP space; it's a routing/addressing classification, not a target for cloud-based application refinement.
- D. custom - Custom App-IDs are manually defined by administrators for proprietary internal apps; they are already explicitly identified and don't need cloud-based discovery.
Memory tip: Think of Cloud-delivered App-ID as a "promotion engine" - it promotes traffic that is either completely unnamed (unknown-tcp) or too broadly named (web-browsing) into something specific. If the traffic already has a meaningful label (private, custom), there's nothing left to promote.
Topics
Community Discussion
No community discussion yet for this question.