PCNSA WildFire and Malware Analysis 2

Question 1

In a WildFire Analysis profile, what does setting the action to 'forward' accomplish?

Accepted Answer

Files matching the criteria are submitted to WildFire for sandbox analysis

Answer

In a WildFire Analysis profile, the 'forward' action causes files matching the specified application and file type to be submitted to the WildFire cloud for analysis.

Question 2

Which of the following file types is NOT natively supported for WildFire analysis?

Accepted Answer

MP3 audio files

Answer

WildFire analyzes file types that can contain executable code or malicious content such as PE/DLL, PDF, Office documents, and APKs, but not audio files like MP3.

Question 3

Where in the PAN-OS web interface can an administrator view WildFire analysis reports for submitted files?

Accepted Answer

Monitor > WildFire Submissions

Answer

WildFire submission logs and detailed analysis reports are accessible under Monitor > WildFire Submissions in the PAN-OS management interface.

Question 4

What happens to WildFire signature updates when a firewall does NOT have an active WildFire subscription?

Accepted Answer

WildFire-derived signatures are bundled into daily Antivirus content updates

Answer

Without a WildFire subscription, WildFire-generated signatures are only received as part of the daily Antivirus content update package rather than every 5 minutes.

Question 5

What is the purpose of the WildFire Inline ML feature available in PAN-OS?

Accepted Answer

To use on-device machine learning models to classify threats locally without cloud submission

Answer

WildFire Inline ML uses locally-running machine learning models on the firewall to classify certain file types as malicious in real time without requiring cloud submission.

PCNSA - Palo Alto Networks Certified Network Security Administrator Practice Test

PCNSA - Palo Alto Networks Certified Network Security Administrator Practice Test

PCNSA WildFire and Malware Analysis 2