Palo Alto Networks Certified Network Security Engineer (PCNSE) — Question 73

Which event will happen if an administrator uses an Application Override Policy?

Answer options

• A. Threat-ID processing time is decreased.
• B. The Palo Alto Networks NGFW stops App-ID processing at Layer 4.
• C. The application name assigned to the traffic by the security rule is written to the Traffic log.
• D. App-ID processing time is increased.

Correct answer: B

Explanation

The correct answer, B, is accurate because an Application Override Policy instructs the Palo Alto Networks NGFW to cease App-ID processing at Layer 4, allowing the traffic to bypass deeper application identification mechanisms. The other options are incorrect as they either misrepresent the function of the Application Override Policy or suggest changes in processing time that do not accurately reflect its effects.