Courseiva
App-ID and Content-IDeasyMultiple SelectObjective-mapped

PCNSA App-ID and Content-ID Practice Question

Which TWO are capabilities of Content-ID? (Choose two.)

⚠ Common exam trap

It's easy for candidates to confuse App-ID's port-independent application identification with Content-ID's content inspection capabilities, leading them to incorrectly select option B as a Content-ID feature.

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

Blocking files by type (e.g., .exe, .pdf).

Content-ID is a Palo Alto Networks technology that extends App-ID by inspecting the actual content of traffic. It includes a file blocking capability that can block files by type (e.g., .exe, .pdf) based on the file's signature, not just its extension, providing granular control over file transfers. This is a core feature of Content-ID for data filtering.

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

  • Blocking files by type (e.g., .exe, .pdf).

    Why this is correct

    File blocking profile controls this.

  • Identifying the application regardless of port.

    Why it's wrong here

    That is App-ID.

  • Applying QoS policies to applications.

    Why it's wrong here

    QoS is separate.

  • Preventing sensitive data from being transferred.

    Why this is correct

    Data filtering profiles control this.

Visual reference

Source Router + ACL permit 10.0.0.0/8 deny any Server 10.0.0.5 ✓ 192.168.1.1 ✗ dropped ACLs evaluate top-down; first match wins — implicit deny all at end

About these practice questions

One of 516 original PCNSA practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →

How Courseiva writes practice questions · Editorial policy

JA

Written by Johnson Ajibi, MSc IT Security

Senior Network & Security Engineer · founder of Courseiva

This PCNSA practice question is part of Courseiva's free Palo Alto Networks certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the PCNSA exam.