PCNSA App-ID and Content-ID Practice Question
A security administrator needs to ensure that employees cannot post credit card numbers on social media websites. The company uses Palo Alto Networks firewalls with SSL decryption configured for outbound traffic. Which Content-ID feature should be used to detect and block the credit card numbers in HTTP POST requests to social media sites?
⚠ Common exam trap
Watch out — candidates often confuse data loss prevention with file blocking or threat prevention, assuming that blocking file uploads or scanning for malware will also detect credit card numbers in web forms.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Data Filtering profile with a custom pattern for credit card numbers.
Data Filtering profiles are specifically designed to detect and control sensitive data such as credit card numbers. By applying a Data Filtering profile with a custom pattern to the security rule that allows social media applications, the firewall can inspect decrypted HTTP POST requests and block those containing credit card numbers. This is the correct Content-ID feature for this scenario.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
File Blocking profile that blocks the 'any' file type in the upload direction.
Why it's wrong here
File Blocking profiles control file transfers, not data within HTTP POST requests. Blocking all file uploads would not prevent a user from typing a credit card number into a web form and submitting it. This approach does not address the requirement and would be ineffective.
- ✗
Vulnerability Protection profile that blocks HTTP POST requests containing numeric patterns.
Why it's wrong here
Vulnerability Protection profiles detect and block exploits and vulnerabilities, not sensitive data. They do not have the capability to identify credit card numbers in HTTP POST data. Using this profile would not meet the requirement and could cause false positives on legitimate traffic.
- ✗
Antivirus security profile with a custom signature for credit card numbers.
Why it's wrong here
Antivirus profiles are designed to detect malware, not sensitive data patterns. Custom signatures in Antivirus are for threats, not for credit card numbers. This feature cannot inspect for and block credit card numbers in web traffic, so it is incorrect for this scenario.
- ✓
Data Filtering profile with a custom pattern for credit card numbers.
Why this is correct
Data Filtering profiles can include custom patterns to detect specific data formats, such as credit card numbers. When applied to a security rule that allows social media applications, the firewall inspects HTTP POST requests (after decryption) for these patterns and can block the session. This directly prevents posting credit card numbers.
Visual reference
Go deeper
Related to this question
About these practice questions
Courseiva writes every PCNSA question from scratch — 385 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed September 2026 · checked against the official Palo Alto Networks exam blueprint
This PCNSA practice question is part of Courseiva's free Palo Alto Networks certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the PCNSA exam.