PCNSA App-ID and Content-ID Practice Question
A security administrator wants to block all traffic using the BitTorrent protocol regardless of port. Which method should they use?
⚠ Common exam trap
Watch out — candidates often default to port-based blocking (Option D) or think URL Filtering (Option A) can block application traffic, failing to recognize that App-ID is the only method that can identify and block applications like BitTorrent irrespective of port or encryption.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Create a security rule with Application set to 'bittorrent' and Action set to 'Deny'.
Palo Alto Networks firewalls use App-ID to identify applications like BitTorrent by their unique signatures, regardless of port or encryption. By creating a security rule with the application set to 'bittorrent' and action set to 'Deny', the firewall blocks all BitTorrent traffic even if it uses non-standard ports or tries to masquerade as other protocols.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Use URL Filtering to block BitTorrent.
Why it's wrong here
URL filtering is for HTTP/HTTPS, not peer-to-peer.
- ✓
Create a security rule with Application set to 'bittorrent' and Action set to 'Deny'.
Why this is correct
App-ID identifies BitTorrent across any port.
- ✗
Use Data Filtering to block BitTorrent traffic.
Why it's wrong here
Data filtering is for file transfers, not protocol blocking.
- ✗
Block the commonly used ports for BitTorrent.
Why it's wrong here
BitTorrent can use random ports.
Go deeper
Related to this question
About these practice questions
Courseiva writes every PCNSA question from scratch — 516 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This PCNSA practice question is part of Courseiva's free Palo Alto Networks certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the PCNSA exam.