https://docs.paloaltonetworks.com/pan-os/8-1/pan-os-admin/threat-prevention/best-practices-for-content-and-threat-content-updates/best-practices-mission- critical.html

Allow-Office-Program rule is indeed using Application Filter as seen on the Application Icon.
The Allow-Social-Media rule allows all Facebook's function as, the Facebook App ID is the Parent App-ID.
FTP is allowed using service not App-ID. The Allow-Office-Program rule is using an application filter not an Application Group.

IEEE 802.1Q is a standard for VLAN tagging in Ethernet networks. In Cisco IOS, VLANs are typically assigned to Layer 2 subinterfaces, which are logical interfaces that allow a physical interface to be divided into multiple virtual interfaces. Each Layer 2 subinterface can be assigned a unique VLAN ID, allowing traffic to be separated and managed based on VLAN membership.