PCNSA Securing Traffic Practice Question
During a security audit, it is discovered that some applications are being incorrectly identified by the Palo Alto Networks firewall. What should the administrator do to improve application identification accuracy?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Verify that App-ID updates are current and enable application identification enhancements such as use of application override if needed.
Ensuring App-ID updates are current and using application identification enhancements (such as application override when needed) directly improves the accuracy of application identification. Option A (SSL Decryption) can help identify encrypted applications but does not directly address misidentification due to outdated signatures or custom needs. Option B (port-based rules) would reduce reliance on App-ID, which is counterproductive. Option C (custom application signatures) is useful but is not the first step; verifying updates and enhancements is a more fundamental action. Therefore, D is the best initial step.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Enable SSL Decryption to inspect encrypted traffic.
Why it's wrong here
While SSL decryption helps visibility, it does not fix incorrect App-ID signatures.
- ✗
Change the security policy to use port-based rules instead of application-based.
Why it's wrong here
Port-based rules are less accurate and defeat the purpose of App-ID; this would not improve identification.
- ✗
Create custom application signatures for the misidentified applications.
Why it's wrong here
Custom signatures are a last resort; first ensure updates and built-in identification are correct.
- ✓
Verify that App-ID updates are current and enable application identification enhancements such as use of application override if needed.
Why this is correct
Updating App-ID and using enhancements like application override can correct misidentification.
Go deeper
Related to this question
About these practice questions
This PCNSA question is part of Courseiva's 516-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This PCNSA practice question is part of Courseiva's free Palo Alto Networks certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the PCNSA exam.