Palo Alto Networks Certified Network Security Engineer (PCNSE) — Question 558

A customer has an application that is being identified as unknown-tcp for one of their custom PostgreSQL database connections.
Which two configuration options can be used to correctly categorize their custom database application? (Choose two.)

Answer options

• A. Application Override policy.
• B. Security policy to identify the custom application.
• C. Custom application.
• D. Custom Service object.

Correct answer: A, C

Explanation

Choosing the Application Override policy allows the user to specify how traffic is identified and categorized, thus helping to correctly classify the custom PostgreSQL application. The Custom application option also enables the definition of a new application type, ensuring proper identification. The other options, while relevant to security and service definitions, do not directly address the need for application categorization.