Palo Alto Networks Certified Network Security Engineer (PCNSE) — Question 351

An administrator creates a custom application containing Layer 7 signatures. The latest application and threat dynamic update is downloaded to the same firewall. The update contains an application that matches the same traffic signatures as the custom application.

Which application will be used to identify traffic traversing the firewall?

Answer options

• A. Custom application
• B. Unknown application
• C. Downloaded application
• D. Incomplete application

Correct answer: A

Explanation

The custom application will be used to identify traffic because it takes precedence over the downloaded application when both match the same signatures. The firewall is designed to prioritize custom configurations over standard updates to ensure specific traffic handling. Therefore, options B, C, and D are incorrect as they do not apply in this context.