Palo Alto Networks Certified Network Security Administrator (PCNSA) — Question 238

Which rule type is appropriate for matching traffic occurring within a specified zone?

How should the administrator configure the firewall to restrict users to specific email applications?

Answer options

• A. Create an application filter and filter it on the collaboration category.
• B. Create an application filter and filter it on the collaboration category, email subcategory.
• C. Create an application group and add the email applications to it.
• D. Create an application group and add the email category to it.

Correct answer: C

Explanation

The correct option is C because creating an application group specifically allows the administrator to gather and manage various email applications effectively. Options A and B suggest using application filters, which are not as suitable for grouping specific applications. Option D does not directly address the need to include specific email applications, instead opting for a broader category.