Palo Alto Networks Certified Network Security Administrator (PCNSA) — Question 298

Which object would an administrator create to enable access to all applications in the office-programs subcategory?

Answer options

• A. HIP profile
• B. URL category
• C. application group
• D. application filter

Correct answer: D

Explanation

The correct answer is D, application filter, as it is specifically designed to control access to applications based on their category. The other options do not serve this purpose; for example, a HIP profile is used for compliance checks, a URL category is focused on web address filtering, and an application group is a collection of applications, not a means to enable access.