PCNSE Exam QuestionsBrowse all questions from this exam

PCNSE Exam - Question 40


What are the differences between using a service versus using an application for Security Policy match?

Show Answer
Correct Answer: C

Using a service in a firewall allows the system to take immediate action based on the port numbers observed in the first packet. Applications, on the other hand, can only be identified after observing enough packets to match the application's signature (App-ID), regardless of the ports being used. This distinction is crucial because services are tied to specific ports, whereas applications can be identified by their behavior and characteristics, irrespective of the port.

Discussion

17 comments
Sign in to comment
rociohaOption: C
Mar 19, 2021

c is correct. https://docs.paloaltonetworks.com/pan-os/8-1/pan-os-admin/app-id/app-id-overview

tururu1496Option: C
Mar 6, 2022

Answer: C

Jared28Option: C
Mar 20, 2022

PCNSE Beacon practice exam has this exact question, answer C. It's probably a retired question.

evdwOption: C
May 5, 2021

Correct answer : C

yogininangpalOption: C
May 6, 2021

Correct answer is C

Rider85Option: C
Apr 12, 2022

The correct is A. In Pcnse beacon exam is the same question

Rider85
Apr 12, 2022

Is C sorry

DerekLi23333Option: C
May 31, 2022

Correct answer is C

UFanatOption: C
Jun 9, 2022

C i a correct one

MyKasalaOption: C
Jul 11, 2022

C is correct

lol12Option: C
Oct 27, 2022

C https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClVwCAK

unknidOption: A
Jan 29, 2022

C is incorrect as f, A because this is why you have applipedia, to understand what ports will be allowed on a certan application. If you want port 4433 on ssl, you have to use ssl + service 4433.

ev333Option: C
Feb 19, 2022

C is correct this is in all palo marketing materials.

confusionOption: C
Feb 20, 2022

App ID needs packets to identify the applicaiton.

ramasamymuthiahOption: C
Apr 20, 2022

Correct answer is C

yazid0016Option: C
Dec 17, 2022

Correct answer is C

MarshpillowzOption: C
Jan 23, 2024

C is the correct answer

bing2021Option: C
Jul 5, 2024

service cares about port, and app id is based on content