Palo Alto Networks Certified Network Security Administrator (PCNSA) — Question 219

An administrator needs to allow users to use only certain email applications.

How should the administrator configure the firewall to restrict users to specific email applications?

Answer options

• A. Create an application filter and filter it on the collaboration category.
• B. Create an application filter and filter it on the collaboration category, email subcategory.
• C. Create an application group and add the email applications to it.
• D. Create an application group and add the email category to it.

Correct answer: C

Explanation

The correct answer is C because creating an application group specifically allows the administrator to organize and manage the required email applications. The other options either filter categories that are too broad or do not specifically address the need to include individual email applications.