pcnsa question 251 discussion

View all Palo Alto Networks Certified Network Security Administrator here
back to palo-alto-networks forum

Question 251

Which rule type is appropriate for matching traffic occurring within a specified zone?

How should the administrator configure the firewall to restrict users to specific email applications?

  • A. Create an application filter and filter it on the collaboration category.
  • B. Create an application filter and filter it on the collaboration category, email subcategory.
  • C. Create an application group and add the email applications to it.
  • D. Create an application group and add the email category to it.
Answer:

b

User Votes:
A
50%
B 1 votes
50%
C 5 votes
50%
D
50%
Discussions
0 / 1000
sara123
1 month, 3 weeks ago

An application group is an object that contains applications that you want to treat similarly in policy. Application groups are useful for enabling access to applications that you explicitly sanction for use within your organization. Grouping sanctioned applications simplifies administration of your rulebases. Instead of having to update individual policy rules when there is a change in the applications you support, you can update only the affected application groups.