Which Security policy rule will allow an admin to block facebook chat but allow Facebook in general?

Which Security policy rule will allow an admin to block facebook chat but allow Facebook in general?Reference: https://live.paloaltonetworks.com/t5/Configuration-Articles/Failed-to-Block-Facebook-Chat-Consistently/ta-p/115673

Question:

Which Security policy rule will allow an admin to block facebook chat but allow Facebook in general?

Options:

Deny application facebook-chat before allowing application facebook

Deny application facebook on top

Allow application facebook on top

Allow application facebook before denying application facebook-chat

Correct Answer

The Correct Answer for this Question is

Deny application facebook-chat before allowing application facebook