Exam NetSec-Architect Topic 1 Question 7 Discussion

Actual exam question for Palo Alto Networks's NetSec-Architect exam
Question #: 7
Topic #: 1
An organization wants to reduce attack surface by allowing only sanctioned applications while blocking unknown traffic. What is the BEST approach?

Suggested Answer: C Vote an answer

An allow-list using App-ID ensures only approved applications are permitted, reducing attack surface significantly. Blocking ports alone is insufficient because applications can use non- standard ports. Antivirus profiles detect threats but do not enforce application-level access control.

by Nicholas at Aug 26, 2026, 10:16 AM

Limited Time Offer

15%

Off

Get Premium NetSec-Architect Questions as Interactive Self Test Engine or PDF

Comments

Chosen Answer:
This is a voting comment (?) , you can switch to a simple comment.
Switch to a voting comment New
Nick name: Submit Cancel
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
0
0
0
10