Palo Alto Networks Certified Network Security Administrator (PCNSA) — Question 71

How are Application Filters or Application Groups used in firewall policy?

Answer options

• A. An Application Group is a static way of grouping applications and cannot be configured as a nested member of Application Group.
• B. An Application Group is a dynamic way of grouping applications and can be configured as a nested member of an Application Group.
• C. An Application Filter is a dynamic way to group applications and can be configured as a nested member of an Application Group.
• D. An Application Filter is a static way of grouping applications and can be configured as a nested member of an Application Group.

Correct answer: C

Explanation

The correct answer is C, as it accurately describes an Application Filter as a dynamic grouping method that allows nesting within an Application Group. Options A and D incorrectly classify the nature of Application Filters as static, while option B misrepresents the functionality of Application Filters.