OAM Resource /** Pattern Matching Behavior Question

The Oracle Access Manager (OAM) documentation states the "/**" pattern matches "any sequence of zero or more characters that starts with the forward slash character (/).You can use this pattern to protect a path under a specific, named directory". So when I secure a URL using the "/testAppsRoot/testApp1/**" matching pattern and test the configuration using the OAM Access Tester, I would expect the following results:

URL	Matches
/testAppsRoot/testApp1	false
/testAppsRoot/testApp1/	true
/testAppsRoot/testApp1/path1	true
/testAppsRoot/testApp1/path1/path2	true
/testAppsRoot/testApp1?myVar1=string1&myVar2=string2	false

Instead, however, I observe that all the URLs listed in the table match the pattern, leaving me confused as to how the "/**" pattern matching actually works.