Palo Alto Networks Certified Network Security Administrator (PCNSA) — Question 393

Which statement best describes a common use of Policy Optimizer?

Answer options

• A. Policy Optimizer can be used on a schedule to automatically create a disabled Layer 7 App ID Security policy for every Layer 4 policy that exist. Admins can then manually enable policies they want to keep and delete ones they want to remove.
• B. Policy Optimizer can display which Security policies have not been used in the last 90 days.
• C. Policy Optimizer on aVM-50 firewall can display which Layer 7 App-ID Security policies have unused applications.
• D. Policy Optimizer can add or change a Log Forwarding profile for each Security policy selected.

Correct answer: B

Explanation

The correct answer, B, accurately reflects that Policy Optimizer identifies Security policies that have not been active for a specified period, in this case, 90 days. Options A, C, and D describe functionalities that are not typical uses of Policy Optimizer, focusing instead on policy creation, application usage, and log forwarding, which are not its primary functions.