Courseiva
App-ID and Content-IDeasyMultiple ChoiceObjective-mapped

PCNSA App-ID and Content-ID Practice Question

A company wants to block file uploads of PDFs to the internet via HTTP. Which Content-ID profile should be configured?

⚠ Common exam trap

A common mix-up: candidates confuse File Blocking with URL Filtering or Antivirus, assuming that blocking a file type is handled by URL categories or malware scanning, when in fact it requires a dedicated Content-ID profile that inspects the file itself regardless of the URL or threat status.

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

File Blocking Profile

The File Blocking Profile is specifically designed to block file transfers based on file type, such as PDF, over protocols like HTTP. This profile uses Content-ID to inspect the file content and enforce blocking policies for uploads or downloads, making it the appropriate choice to prevent PDF uploads to the internet.

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

  • Vulnerability Protection Profile

    Why it's wrong here

    Vulnerability Protection profiles block exploit attempts.

  • URL Filtering Profile

    Why it's wrong here

    URL Filtering profiles control access to URLs, not file types.

  • File Blocking Profile

    Why this is correct

    File Blocking profiles can block specific file types in uploads.

  • Virus Profile

    Why it's wrong here

    Virus profiles detect malware, not file types.

About these practice questions

One of 516 original PCNSA practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →

How Courseiva writes practice questions · Editorial policy

JA

Written by Johnson Ajibi, MSc IT Security

Senior Network & Security Engineer · founder of Courseiva

This PCNSA practice question is part of Courseiva's free Palo Alto Networks certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the PCNSA exam.