PCNSA Threat Prevention Flashcards

Which Palo Alto Networks security profile is used to detect and block known vulnerability exploits targeting applications?

Answer: Vulnerability Protection profile

The Vulnerability Protection profile detects and blocks exploit attempts targeting known application vulnerabilities.

What is the purpose of the Antivirus security profile on a Palo Alto Networks firewall?

Answer: Detect and block malware in network traffic

The Antivirus security profile scans network traffic to detect and block malware, including viruses and trojans.

Which action in a Threat Prevention profile causes the firewall to generate a log entry but still allow the traffic?

Answer: Alert

The Alert action logs the event and generates an alert but permits the traffic to pass through.

What does the Anti-Spyware profile protect against on a Palo Alto Networks firewall?

Answer: Command-and-control (C2) traffic and spyware phone-home activity

The Anti-Spyware profile detects and blocks spyware communications, including C2 traffic from compromised hosts.

In Palo Alto Networks threat prevention, what is a 'signature exception' used for?

Answer: To exempt a specific threat ID from a profile's action

A signature exception allows administrators to override the default action for a specific threat ID within a security profile.

Which Palo Alto Networks feature uses machine learning to identify and block unknown threats in real time?

Answer: WildFire

WildFire uses cloud-based sandboxing and machine learning to analyze and block unknown, zero-day threats.