Question 32: NetSec-Analyst: Palo Alto Networks Certified Network Security Analyst

An analyst determines that several sanctioned, predefined applications are being intermittently blocked, even though there is an existing policy permitting them. An investigation reveals that the applications are using non-standard ports, which is causing them to be blocked. The applications are critical for business operations, and the analyst has approval to allow them. Which configuration adjustment should be implemented to ensure secure access to the applications?

1. A. Disable App-ID and port filtering and rely solely on IP addresses of the applications to allow the non-standard ports.
2. B. Apply Disable Server Response Inspection (DSRI) to the existing Security policy to allow the non-standard ports.
3. C. Clone the existing Security policy rule and include unknown-tcp and unknown-udp applications with service set to "any."
4. D. Clone the existing Security policy rule and include the non-standard ports under services. — đáp án hiện tại