Welcome to ExamTopics
ExamTopics Logo
- Expert Verified, Online, Free.
Location Chicago IL, USA

Exam PCNSA topic 1 question 3 discussion

Actual exam question from Palo's PCNSA
Question #: 3
Topic #: 1
[All PCNSA Questions]

A security administrator has configured App-ID updates to be automatically downloaded and installed. The company is currently using an application identified by
App-ID as SuperApp_base.
On a content update notice, Palo Alto Networks is adding new app signatures labeled SuperApp_chat and SuperApp_download, which will be deployed in 30 days.
Based on the information, how is the SuperApp traffic affected after the 30 days have passed?

  • A. All traffic matching the SuperApp_chat, and SuperApp_download is denied because it no longer matches the SuperApp-base application
  • B. No impact because the apps were automatically downloaded and installed
  • C. No impact because the firewall automatically adds the rules to the App-ID interface
  • D. All traffic matching the SuperApp_base, SuperApp_chat, and SuperApp_download is denied until the security administrator approves the applications
Show Suggested Answer Hide Answer

Suggested Answer: C

Comments

rebet
3 weeks, 4 days ago
The correct answer is: A. All traffic matching the SuperApp_chat, and SuperApp_download is denied because it no longer matches the SuperApp-base application
upvoted 1 times
...
rach91
3 weeks, 3 days ago
I agree with you @Rebet. To allow the new applications, we need to modify or add a new policy. https://docs.paloaltonetworks.com/pan-os/9-0/pan-os-admin/app-id/manage-new-app-ids-introduced-in-content-releases/review-new-app-id-impact-on-existing-policy-rules
upvoted 1 times
...

SaveCancel