App-ID is fundamental to the application-aware capabilities of PAN-OS SD-WAN. - Option A: Encryption is typically handled by IPSec or SSL/TLS tunnels, not App-ID. - Option B (Correct): App-ID identifies the specific application (e.g., Zoom, SQL, SharePoint). The Path Selection policy rules use these App-IDs as matching criteria. This allows you to define rules like "For Zoom traffic (App-ID 'zoom'), use the path with the lowest jitter," or "For SQL traffic (App-ID 'ms-sql'), use the MPLS path if latency is below 50ms." The real-time path quality metrics are then applied to the links based on the application's needs as defined in the policy. - Option C: App-ID identifies the application; it doesn't modify its port or protocol. - Option D: App-ID identification occurs on the data plane during initial session setup, not the management plane for routing decisions. - Option E: App-ID is used for both security policy (allow/deny/inspect) and for intelligent path selection in SD-WAN.