PCNSA App-ID and Content-ID Practice Question
Which Content-ID feature can be used to prevent credit card numbers from being sent via webmail applications?
⚠ Common exam trap
It's easy for candidates to confuse Data Filtering with File Blocking, assuming that blocking file attachments is sufficient to prevent data loss, but Data Filtering is specifically designed to inspect and block sensitive text patterns within the body of webmail or other application traffic.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Data Filtering Profile
Data Filtering Profile is the correct Content-ID feature because it allows you to define custom patterns, such as regular expressions, to match sensitive data like credit card numbers. When a webmail application attempts to send an email containing a matching pattern, the firewall can block or alert on the transaction, preventing data exfiltration.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
URL Filtering Profile
Why it's wrong here
URL Filtering classifies and controls web destinations by category, not payload contents such as card numbers inside webmail submissions. It is tempting because it governs webmail access itself, and would be correct for blocking a webmail site or category rather than inspecting message data.
- ✗
Application Override
Why it's wrong here
Application Override changes which App-ID signature and ports the firewall applies to traffic; it performs no content inspection for card numbers. It is tempting because it does alter how webmail sessions are identified, and would be correct when a custom application must be recognised on non-standard ports.
- ✗
File Blocking Profile
Why it's wrong here
File Blocking inspects files transferred over permitted applications and blocks them by type or direction, not patterns inside message bodies. It is tempting because it does stop data leaving via webmail, and would be correct for preventing uploads of executables or confidential documents.
- ✓
Data Filtering Profile
Why this is correct
Data Filtering profiles inspect content streams for predefined patterns such as credit card numbers, then block or alert on detection. This directly satisfies the requirement to stop card numbers leaving through webmail, unlike antivirus or URL filtering, which examine files and destinations rather than data patterns.
Go deeper
Related to this question
About these practice questions
One of 385 original PCNSA practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This PCNSA practice question is part of Courseiva's free Palo Alto Networks certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the PCNSA exam.