PCNSA Policy Evaluation and Management Practice Question

Correct answer & explanation

Application override forces a specific application identification for traffic. If the rule uses application override but the override is not set to HTTP for HTTP traffic (port 80), the rule will not match, even though the traffic is HTTP. Option A is incorrect because rule ordering is irrelevant when testing a specific rule with Policy Tester; it evaluates the rule regardless of its position in the rulebase. Option B is incorrect because user-ID mapping correctness does not affect the match for HTTP traffic from the user; the issue is about application identification. Option C is incorrect because while a rule using only port 443 would not match HTTP on port 80, the question states the rule allows both HTTP and HTTPS, so the mismatch is due to application override, not port restriction.