Paloalto Networks Palo Alto Networks Certified Security Engineer (PCNSE) PAN-OS 11.0 PCNSE Question # 70 Topic 8 Discussion

Paloalto Networks Palo Alto Networks Certified Security Engineer (PCNSE) PAN-OS 11.0 PCNSE Question # 70 Topic 8 Discussion

PCNSE Exam Topic 8 Question 70 Discussion:
Question #: 70
Topic #: 8

A firewall engineer supports a mission-critical network that has zero tolerance for application downtime. A best-practice action taken by the engineer is configure an applications and Threats update schedule with a new App-ID threshold of 48 hours. Which two additional best-practice guideline actions should be taken with regard to dynamic updates? (Choose two.)


A.

Create a Security policy rule with an application filter to always allow certain categories of new App-IDs.


B.

Click "Review Apps" after application updates are installed in order to assess how the changes might impact Security policy.


C.

Select the action "download-only" when configuring an Applications and Threats update schedule.


D.

Configure an Applications and Threats update schedule with a threshold of 24 to 48 hours


Get Premium PCNSE Questions

Contribute your Thoughts:


Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.