Which Security policy rule will allow an admin to block facebook chat but allow Facebook in general?

Which Security policy rule will allow an admin to block facebook chat but allow Facebook in general?
A . Deny application facebook-chat before allowing application facebook
B . Deny application facebook on top
C . Allow application facebook on top
D . Allow application facebook before denying application facebook-chat

View Answer

Answer: A

Explanation:

Reference: https://live.paloaltonetworks.com/t5/Configuration-Articles/Failed-to-Block-Facebook-Chat-Consistently/ta-p/115673