PCNSE Securing Traffic and App-ID Practice Question
A security administrator is configuring App-ID to identify custom applications over TCP port 8080. The traffic is HTTP-based but the firewall is classifying it as 'web-browsing'. Which two steps should the administrator take to ensure the traffic is correctly identified as the custom application? (Choose two.)
⚠ Common exam trap
Candidates often confuse application overrides with security policy rules, thinking that simply allowing the application in a policy will reclassify the traffic, when in fact the firewall must first identify the application correctly before the policy can match it.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Create an application override for the custom application.
An application override forces the firewall to bypass App-ID inspection and classify traffic based on the specified application (the custom application) and port (8080). This is necessary when the firewall's default App-ID engine misidentifies HTTP-based traffic as 'web-browsing' instead of the custom application. Overrides are applied in the security policy rule and take precedence over signature-based identification.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Create an application override for the custom application.
Why this is correct
An application override forces the firewall to classify the traffic as the specified application, ensuring correct identification.
- ✗
Enable SSL decryption on the traffic.
Why it's wrong here
The traffic is HTTP, not HTTPS, so SSL decryption is not relevant.
- ✗
Set the application to 'any' in the security policy.
Why it's wrong here
Setting application to any bypasses application matching, but does not help identify the custom application.
- ✗
Configure a security policy rule to allow the application.
Why it's wrong here
A security rule allows or blocks traffic but does not affect identification.
- ✓
Create a custom App-ID signature for the application.
Why this is correct
A custom signature enables App-ID to detect the application based on traffic patterns.
Go deeper
Related to this question
About these practice questions
This PCNSE question is part of Courseiva's 504-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This PCNSE practice question is part of Courseiva's free Palo Alto Networks certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the PCNSE exam.