Palo Alto Networks Certified Network Security Engineer (PCNSE) — Question 528

What are two best practices for incorporating new and modified App-IDs? (Choose two.)

Answer options

• A. Run the latest PAN-OS version in a supported release tree to have the best performance for the new App-IDs
• B. Study the release notes and install new App-IDs if they are determined to have low impact
• C. Configure a security policy rule to allow new App-IDs that might have network-wide impact
• D. Perform a Best Practice Assessment to evaluate the impact of the new or modified App-IDs

Correct answer: B, C

Explanation

Option B is correct because it emphasizes the importance of reviewing release notes before implementing new App-IDs, ensuring minimal disruption. Option C is also correct as it highlights the need to create security policies for new App-IDs that may influence the network. Options A and D, while useful, do not directly address the best practices for incorporating new App-IDs as specified in the question.