PCNSA App-ID and Content-ID Practice Question
A user reports that they are unable to download executable files from the internet. The firewall security rule allows the application. What should the administrator check first?
⚠ Common exam trap
Candidates often confuse file blocking with URL filtering or application control, assuming that allowing the application automatically permits all file transfers, but Content-ID file blocking operates independently at the file level.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
The file blocking profile for the rule.
The user cannot download executable files, which is a specific file type. The file blocking profile is the Content-ID feature that controls file transfer based on type, regardless of the application being allowed. Since the security rule permits the application, the administrator should first check the file blocking profile attached to that rule to see if it blocks 'executable' files.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
The SSL decryption policy.
Why it's wrong here
SSL decryption is unrelated to blocking file downloads.
- ✗
The vulnerability protection profile.
Why it's wrong here
Vulnerability Protection blocks exploit attempts, not file downloads.
- ✓
The file blocking profile for the rule.
Why this is correct
A file blocking profile set to block 'exe' would prevent downloads.
- ✗
The URL filtering category for 'executables'.
Why it's wrong here
URL Filtering categories do not block specific file types.
Go deeper
Related to this question
About these practice questions
Courseiva writes every PCNSA question from scratch — 516 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This PCNSA practice question is part of Courseiva's free Palo Alto Networks certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the PCNSA exam.