Palo Alto Networks Certified Network Security Administrator (PCNSA) — Question 328

What are two differences between an application group and an application filter? (Choose two.)

Answer options

• A. Application groups enable access to sanctioned applications explicitly, while application filters enable access to sanctioned applications implicitly.
• B. Application groups are static, while application filters are dynamic.
• C. Application groups dynamically group applications based on attributes, while application filters contain applications that are statically grouped.
• D. Application groups can be added to application filters, while application filters cannot be added to application groups.

Correct answer: A, B

Explanation

Option A is correct because application groups provide explicit permission for specific applications, while application filters work on a broader, implicit access basis. Option B is also correct as application groups are typically defined and do not change, while application filters can adapt based on conditions. Options C and D are incorrect because they misrepresent the nature of application groups and filters.