PCNSE URL Filtering and Application Control 2

Question 1

What is App-ID in Palo Alto Networks firewalls?

Accepted Answer

A technology that identifies applications by analyzing traffic behavior, signatures, and protocol decoding

Answer

A user identity mapping service

Answer

An application performance monitoring tool

Answer

A module for blocking specific file types

Question 2

What is an Application Override policy in Palo Alto Networks used for?

Accepted Answer

To force the firewall to skip App-ID processing and treat traffic as a custom application

Answer

To allow an application blocked by security policy

Answer

To override URL category decisions for specific applications

Answer

To bypass SSL decryption for trusted applications

Question 3

Which feature allows Palo Alto firewalls to identify users behind a shared IP address for policy enforcement?

Accepted Answer

User-ID

Answer

App-ID

Answer

Content-ID

Answer

Device-ID

Question 4

What is the purpose of Application Filters in Palo Alto Networks security policy?

Accepted Answer

To dynamically group applications based on characteristics like category, risk, or technology

Answer

To create static application groups for policy use

Answer

To block applications matching a threat signature

Answer

To assign bandwidth to specific applications

Question 5

What happens when a Palo Alto firewall encounters an application that App-ID cannot identify during the initial packets?

Accepted Answer

The firewall applies the policy for 'unknown-tcp' or 'unknown-udp' while continuing to identify the application

Answer

The traffic is immediately dropped

Answer

The firewall requests a signature update before processing

Answer

The session is placed in a hold queue indefinitely

Question 6

Which App-ID feature allows custom application signatures for proprietary internal applications?

Accepted Answer

Custom App-ID Signatures

Answer

Dynamic Updates

Answer

Application Override

Answer

Threat Vault