Palo Alto Networks Certified Network Security Administrator (PCNSA) — Question 104

At which point in the App-ID update process can you determine if an existing policy rule is affected by an App-ID update?

Answer options

• A. after clicking Check Now in the Dynamic Update window
• B. after committing the firewall configuration
• C. after installing the update
• D. after downloading the update

Correct answer: D

Explanation

The correct answer is D because after downloading the update, you can assess which existing policy rules may be impacted. The other options do not provide the opportunity to review policy implications until after the update is already in progress or completed.