Which statement best describes a common use of Policy Optimizer?
A.
Policy Optimizer can be used on a schedule to automatically create a disabled Layer 7 App ID Security policy for every Layer 4 policy that exist. Admins can then manually enable policies they want to keep and delete ones they want to remove.
B.
Policy Optimizer can display which Security policies have not been used in the last 90 days.
C.
Policy Optimizer on aVM-50 firewall can display which Layer 7 App-ID Security policies have unused applications.
D.
Policy Optimizer can add or change a Log Forwarding profile for each Security policy selected.
Not correct to me. Seems to be B. Documentation says it does not change profiles.
https://docs.paloaltonetworks.com/prisma/prisma-access/prisma-access-cloud-managed-admin/create-prisma-access-policy/policy-optimizer
Identification of Overly Permissive Rules: The Policy Optimizer categorizes rules as overly permissive if they are allowing any application traffic and are at least 90 days old. This categorization is important because such rules can introduce security gaps by allowing unnecessary traffic
for me is A
Policy Optimizer identifies port-based rules so you can convert them to application-based allow rules or add applications from a port-based rule to an existing application-based rule without compromising application availability.
https://docs.paloaltonetworks.com/pan-os/10-2/pan-os-admin/app-id/security-policy-rule-optimization
This section is not available anymore. Please use the main Exam Page.PCNSA Exam Questions
Log in to ExamTopics
Sign in:
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
Hyay
Highly Voted 2 years, 7 months agodc6a988
Most Recent 10 months, 1 week agoAredus
1 year, 1 month agoReliic
1 year, 5 months agoCalica
1 year, 6 months agodawlims
1 year, 8 months agoSkey
1 year, 10 months agoinnuendo2
1 year, 10 months agoTheMaster01
2 years, 7 months ago