PCNSA App-ID and Content-ID Practice Question
Which TWO are required for accurate application identification when an application uses non-standard ports?
⚠ Common exam trap
Test-takers frequently think defining a custom service for the port is sufficient for identification, but App-ID requires either its built-in signatures or a custom application signature to accurately identify applications on non-standard ports.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Enable App-ID.
App-ID is the core technology that identifies applications regardless of port, using signatures, protocol decoders, and behavioral analysis. When an application uses non-standard ports, App-ID must be enabled to inspect traffic beyond simple port-based classification, ensuring accurate identification even if the application is not using its default port.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Define a custom service for the port.
Why it's wrong here
Custom services are for port mapping, not application identification.
- ✓
Enable App-ID.
Why this is correct
App-ID must be enabled to perform application identification.
- ✗
Use a Content-ID profile.
Why it's wrong here
Content-ID profiles enforce security, not identification.
- ✓
Create a custom application signature.
Why this is correct
A custom signature allows the firewall to identify the application on the non-standard port.
- ✗
Disable SSL Decryption.
Why it's wrong here
Disabling SSL decryption would make it harder to identify encrypted applications.
Go deeper
Related to this question
About these practice questions
One of 516 original PCNSA practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This PCNSA practice question is part of Courseiva's free Palo Alto Networks certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the PCNSA exam.