NetSec-Pro Connectivity And Security Practice Question
An administrator observes that traffic is being correctly identified by App-ID, but the firewall is not applying the expected security profile. What is the most likely reason?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
The Security Policy is missing an attached Security Profile Group.
Security profiles are only applied to traffic that is allowed by a Security Policy. If the policy does not have a profile group attached, the action is simply 'allow' without inspection.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
The Zone protection profile is misconfigured.
Why it's wrong here
Zone protection is for DoS protection, not application-specific policy enforcement.
- ✗
App-ID is disabled globally.
Why it's wrong here
If App-ID were disabled, the traffic wouldn't be identified as expected.
- ✗
Decryption is not enabled.
Why it's wrong here
While needed for deep inspection, profiles can still act on unencrypted traffic.
- ✓
The Security Policy is missing an attached Security Profile Group.
Why this is correct
Without a profile group, the firewall will permit traffic without applying advanced security features.
About these practice questions
Courseiva writes every NetSec-Pro question from scratch — 191 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed August 2026 · checked against the official Palo Alto Networks exam blueprint
This NetSec-Pro practice question is part of Courseiva's free Palo Alto Networks certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the NetSec-Pro exam.