Palo Alto Networks Certified Network Security Administrator (PCNSA) — Question 319

An administrator would like to block traffic to all high risk audio streaming applications, including new App-IDs introduced with content updates.

Which filter should the administrator configure in the application filter object?

Answer options

• A. The category is media, and the characteristic includes Evasive.
• B. The subcategory is audio-streaming, and the risk is 1.
• C. The subcategory is audio-streaming, and the risk is 5.
• D. The category is media, and the tag is high risk.

Correct answer: C

Explanation

The correct answer is C because it specifies the subcategory of audio-streaming applications with the highest risk level, which is necessary for blocking high-risk traffic. Option A is incorrect as it mentions 'Evasive' characteristics which do not specifically address audio streaming. Option B refers to a low risk level of 1, which does not meet the requirement for blocking high-risk applications. Option D talks about media categorization but lacks the precision of risk level needed for this scenario.