Palo Alto Networks Certified Network Security Administrator (PCNSA) — Question 249

An organization has some applications that are restricted for access by the Human Resources Department only, and other applications that are available for any known user in the organization.

What object is best suited for this configuration?

Answer options

• A. Application Group
• B. Tag
• C. External Dynamic List
• D. Application Filter

Correct answer: A

Explanation

The correct answer is A, Application Group, as it allows for the organization of applications based on specific user or department requirements. The other options, such as Tag, External Dynamic List, and Application Filter, do not provide the same level of access control and grouping specific to user roles within an organization.