PCNSE Manage, Monitor and Operate Practice Question
Exhibit
Refer to the exhibit.
config
{
"deviceconfig": {
"system": {
"application-override": [
{
"@name": "override-smtp",
"port": 2525,
"application": "smtp",
"protocol": "tcp"
}
]
}
}
}An administrator has applied the above configuration on a firewall. What will happen to traffic destined to TCP port 2525?
⚠ Common exam trap
Candidates often assume the firewall always performs deep packet inspection to identify applications, but application override explicitly disables App-ID for the specified traffic, forcing a static classification.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
All traffic on TCP port 2525 will be classified as the application 'smtp'.
The firewall's application override configuration explicitly maps TCP port 2525 to the application 'smtp'. When an application override is applied, the firewall bypasses App-ID and classifies all traffic matching the specified port and protocol as the defined application, regardless of the actual payload. This means any traffic on TCP port 2525 will be treated as SMTP traffic for policy enforcement and inspection purposes.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
All traffic on TCP port 2525 will be classified as the application 'smtp'.
Why this is correct
The application override forces identification as SMTP.
- ✗
The firewall will perform deeper inspection to identify the application.
Why it's wrong here
Override skips App-ID and uses the specified application.
- ✗
The traffic will be blocked because the application is unknown.
Why it's wrong here
It is overridden to SMTP, so it will be allowed if policy permits.
- ✗
The traffic will be treated as generic TCP and passed without inspection.
Why it's wrong here
Override assigns a specific application, not generic.
Go deeper
Related to this question
About these practice questions
Courseiva writes every PCNSE question from scratch — 504 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This PCNSE practice question is part of Courseiva's free Palo Alto Networks certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the PCNSE exam.