exam questions

Exam PCNSA All Questions

View all questions & answers for the PCNSA exam

Exam PCNSA topic 1 question 368 discussion

Actual exam question from Palo Alto Networks's PCNSA
Question #: 368
Topic #: 1
[All PCNSA Questions]

What are two differences between an application group and an application filter? (Choose two.)

  • A. Application groups enable access to sanctioned applications explicitly, while application filters enable access to sanctioned applications implicitly.
  • B. Application groups are static, while application filters are dynamic.
  • C. Application groups dynamically group applications based on attributes, while application filters contain applications that are statically grouped.
  • D. Application groups can be added to application filters, while application filters cannot be added to application groups.
Show Suggested Answer Hide Answer
Suggested Answer: AB 🗳️

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
perceptivity
9 months, 3 weeks ago
Selected Answer: AB
An application filter is dynamic and enables access to applications that you do not explicitly sanction, but that you want users to be able to access. Application groups are static and are useful for enabling access to applications that you explicitly sanction for use within your organization. https://docs.paloaltonetworks.com/pan-os/11-0/pan-os-admin/app-id/use-application-objects-in-policy/create-an-application-group An application filter is dynamic and enables access to applications that you do not explicitly sanction, but that you want users to be able to access. https://docs.paloaltonetworks.com/pan-os/11-0/pan-os-admin/app-id/use-application-objects-in-policy/create-an-application-filter
upvoted 4 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago