PSE-STRATA-PRO-24 · Question #11
Which three use cases are specific to Policy Optimizer? (Choose three.)
The correct answer is A. Discovering applications on the network and transitions to application-based policy over time B. Converting broad rules based on application filters into narrow rules based on application groups C. Enabling migration from port-based rules to application-based rules. Discovering Applications on the Network (Answer A): Policy Optimizer analyzes traffic logs to identify applications running on the network that are currently being allowed by port-based or overly permissive policies. It provides visibility into these applications, enabling…
Question
Which three use cases are specific to Policy Optimizer? (Choose three.)
Options
- ADiscovering applications on the network and transitions to application-based policy over time
- BConverting broad rules based on application filters into narrow rules based on application groups
- CEnabling migration from port-based rules to application-based rules
- DDiscovering 5-tuple attributes that can be simplified to 4-tuple attributes
- EAutomating the tagging of rules based on historical log data
How the community answered
(43 responses)- A70% (30)
- D9% (4)
- E21% (9)
Explanation
Discovering Applications on the Network (Answer A): Policy Optimizer analyzes traffic logs to identify applications running on the network that are currently being allowed by port-based or overly permissive policies. It provides visibility into these applications, enabling administrators to transition to more secure, application-based policies over time. Converting Broad Rules into Narrow Rules (Answer B): Policy Optimizer helps refine policies by converting broad application filters (e.g., rules that allow all web applications) into narrower rules based on specific application groups. This reduces the risk of overly permissive access while maintaining granular control. Migrating from Port-Based Rules to Application-Based Rules (Answer C): One of the primary use cases for Policy Optimizer is enabling organizations to migrate from legacy port-based rules to application-based rules, which are more secure and aligned with Zero Trust principles. Policy Optimizer identifies traffic patterns and automatically recommends the necessary application- based policies.
Topics
Community Discussion
No community discussion yet for this question.