Palo Alto Networks Certified Network Security Administrator (PCNSA) — Question 3

An administrator needs to allow users to use their own office applications. How should the administrator configure the firewall to allow multiple applications in a dynamic environment?

Answer options

• A. Create an Application Filter and name it Office Programs, then filter it on the business-systems category, office-programs subcategory
• B. Create an Application Group and add business-systems to it
• C. Create an Application Filter and name it Office Programs, then filter it on the business-systems category
• D. Create an Application Group and add Office 365, Evernote, Google Docs, and Libre Office

Correct answer: A

Explanation

The correct answer is A because creating an Application Filter and specifying the subcategory allows for precise control over which office applications can be used, adapting to a dynamic environment. Option B is incorrect as simply adding business-systems to an Application Group does not provide the necessary filtering capability. Option C lacks the subcategory specification, which is crucial for more granular control, and option D is not correct as it focuses on specific applications rather than allowing a broader range through filtering.