2.4 Create and Apply Application Override Policies NETWORK-SECURITY-ANALYST Practice Questions (Page 4)

Questions 16–19

1. 16application · medium

   A financial firm runs a proprietary trading application that uses UDP port 5001. The firewall currently identifies this traffic as 'udp' generic. The administrator needs to create an application override so that a security rule can apply specific logging to this traffic. Which attributes must be specified in the application override configuration?

   • APort as 5001 and the custom application name, with the protocol left as 'any'.
   • BIP protocol as UDP, port as 5001, and the custom application name.
   • CIP protocol as TCP, port as 5001, and the custom application name.
   • DSource IP, destination IP, and the custom application name.
   Reveal Solution Discussion Select an answer first
2. 17foundation · easy

   Which attributes are configured in an application override object?

   • AIP protocol, port, and the application to override.
   • BPort range, VLAN ID, and the application category.
   • CSource IP, destination IP, and the application signature.
   • DApplication ID, user ID, and the decryption profile.
   Reveal Solution Discussion Select an answer first
4. 18foundation · easy

   What is the effect of applying an application override to a security rule?

   • AThe rule's application field is set to the override's application, and matching traffic is treated as that application.
   • BThe rule's action is automatically changed to 'deny'.
   • CThe rule is moved to the top of the security rule base.
   • DThe rule is applied only to traffic that App-ID has already identified as the override application.
   Reveal Solution Discussion Select an answer first
5. 19foundation · easy

   In an application override object, what does the 'port' attribute specify?

   • AThe port used by the firewall to send logs to Panorama.
   • BThe destination port (or port range) of the traffic to be overridden.
   • CThe source port of the traffic to be overridden.
   • DThe port number of the application's signature.
   Reveal Solution Discussion Select an answer first