NETSEC-ANALYST practice question 10 of 35

Which link in the web interface enables a security administrator to view the security policy rules that match new application signatures?

Full set: 370 questions

Domain Network Security

Answer options
A: Review Apps
B: Review App Matches
C: Pre-analyze
D: Review Policies Correct answer
Correct Answer:
D. Review Policies
Explanation

When a new "Applications and Threats" content update is downloaded but not yet installed, a "Review Policies" link appears on the Device > Dynamic Updates page. Clicking this link opens the "Policy Match for New Applications" window. This feature allows a security administrator to proactively see which existing security policy rules will be matched by the new application signatures included in the update. This is a critical step to assess the potential impact on network traffic and security posture before committing to the installation of the new content version.

Why Incorrect

A. Review Apps: This is not the specific name of the link in the PAN-OS web interface for reviewing the policy impact of new application signatures.
B. Review App Matches: While the function involves reviewing application matches against policies, this is not the actual name of the link provided in the user interface.
C. Pre-analyze: This is a generic term and does not correspond to a specific feature or link within the PAN-OS web interface for this purpose.

References

1. Palo Alto Networks PAN-OS® Administrator’s Guide 11.0: In the section "Install Content and Software Updates

" under the subsection "Best Practices for Content Updates

" it states: "Before you install a new version of the Applications and Threats content update

you can review the new and modified App-IDs to determine how the changes will impact your existing security policy rulebase. From Device > Dynamic Updates

click Review Policies."

Source: Palo Alto Networks

"PAN-OS® Administrator’s Guide 11.0

" Document Version 11.0

Page: "Install Content and Software Updates" section.

2. Palo Alto Networks PAN-OS® Administrator’s Guide 10.2: The process is detailed in the chapter on managing updates. It describes the workflow for content updates: "After you download the latest content update

a Review Policies link displays. Click the link to see which of your existing security policy rules will be matched by the new application signatures."

Source: Palo Alto Networks

"PAN-OS® Administrator’s Guide 10.2

" Document Version 10.2

Chapter: "Manage New and Modified App-IDs

" Section: "Review New App-ID Signatures."

Scroll to Top