Palo Alto Networks Certified Network Security Administrator (PCNSA) — Question 7

A security administrator has configured App-ID updates to be automatically downloaded and installed. The company is currently using an application identified by
App-ID as SuperApp_base.
On a content update notice, Palo Alto Networks is adding new app signatures labeled SuperApp_chat and SuperApp_download, which will be deployed in 30 days.
Based on the information, how is the SuperApp traffic affected after the 30 days have passed?

Answer options

• A. All traffic matching the SuperApp_chat, and SuperApp_download is denied because it no longer matches the SuperApp-base application
• B. No impact because the apps were automatically downloaded and installed
• C. No impact because the firewall automatically adds the rules to the App-ID interface
• D. All traffic matching the SuperApp_base, SuperApp_chat, and SuperApp_download is denied until the security administrator approves the applications

Correct answer: A

Explanation

The correct answer is A because once the new app signatures are introduced, traffic matching SuperApp_chat and SuperApp_download will be denied as they do not align with the original SuperApp_base application. The other options are incorrect because they imply that traffic will continue to be allowed or that updates will automatically apply without issues, which is not the case.