exam questions

Exam PCNSE All Questions

View all questions & answers for the PCNSE exam

Exam PCNSE topic 1 question 40 discussion

Actual exam question from Palo Alto Networks's PCNSE
Question #: 40
Topic #: 1
[All PCNSE Questions]

What are the differences between using a service versus using an application for Security Policy match?

  • A. Use of a ג€serviceג€ enables the firewall to take immediate action with the first observed packet based on port numbers. Use of an ג€applicationג€ allows the firewall to take immediate action if the port being used is a member of the application standard port list.
  • B. There are no differences between ג€serviceג€ or ג€applicationג€. Use of an ג€applicationג€ simplifies configuration by allowing use of a friendly application name instead of port numbers.
  • C. Use of a ג€serviceג€ enables the firewall to take immediate action with the first observed packet based on port numbers. Use of an ג€applicationג€ allows the firewall to take action after enough packets allow for App-ID identification regardless of the ports being used
  • D. Use of a ג€serviceג€ enables the firewall to take action after enough packets allow for App-ID identification
Show Suggested Answer Hide Answer
Suggested Answer: C 🗳️

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
rocioha
Highly Voted 4 years ago
c is correct. https://docs.paloaltonetworks.com/pan-os/8-1/pan-os-admin/app-id/app-id-overview
upvoted 18 times
...
bing2021
Most Recent 9 months ago
Selected Answer: C
service cares about port, and app id is based on content
upvoted 1 times
...
Marshpillowz
1 year, 2 months ago
Selected Answer: C
C is the correct answer
upvoted 1 times
...
yazid0016
2 years, 3 months ago
Correct answer is C
upvoted 1 times
...
lol12
2 years, 5 months ago
Selected Answer: C
C https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClVwCAK
upvoted 2 times
...
MyKasala
2 years, 8 months ago
Selected Answer: C
C is correct
upvoted 2 times
...
UFanat
2 years, 9 months ago
C i a correct one
upvoted 2 times
...
DerekLi23333
2 years, 10 months ago
Selected Answer: C
Correct answer is C
upvoted 2 times
...
ramasamymuthiah
2 years, 11 months ago
Correct answer is C
upvoted 1 times
...
Rider85
2 years, 11 months ago
Selected Answer: C
The correct is A. In Pcnse beacon exam is the same question
upvoted 2 times
Rider85
2 years, 11 months ago
Is C sorry
upvoted 1 times
...
...
Jared28
3 years ago
PCNSE Beacon practice exam has this exact question, answer C. It's probably a retired question.
upvoted 3 times
...
tururu1496
3 years ago
Selected Answer: C
Answer: C
upvoted 3 times
...
confusion
3 years, 1 month ago
Selected Answer: C
App ID needs packets to identify the applicaiton.
upvoted 1 times
...
ev333
3 years, 1 month ago
Selected Answer: C
C is correct this is in all palo marketing materials.
upvoted 1 times
...
unknid
3 years, 2 months ago
Selected Answer: A
C is incorrect as f, A because this is why you have applipedia, to understand what ports will be allowed on a certan application. If you want port 4433 on ssl, you have to use ssl + service 4433.
upvoted 1 times
...
yogininangpal
3 years, 11 months ago
Correct answer is C
upvoted 2 times
...
evdw
3 years, 11 months ago
Correct answer : C
upvoted 2 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago