PCNSE URL Filtering and Application Control 3

Question 1

What is WildFire in Palo Alto Networks?

Accepted Answer

A cloud-based malware analysis service that detonates unknown files to identify threats

Answer

WildFire is Palo Alto's cloud-based sandbox that analyzes unknown files and URLs by executing them in a controlled environment to identify zero-day and unknown malware.

Question 2

What file actions can be configured in a File Blocking profile on a Palo Alto firewall?

Accepted Answer

Alert, Block, and Continue

Answer

File Blocking profiles support Alert (log the file transfer), Block (prevent the transfer), and Continue (notify the user but allow transfer after confirmation) actions.

Question 3

Which Palo Alto Networks security feature analyzes DNS queries to block connections to malicious domains, including C2 servers?

Accepted Answer

DNS Security

Answer

DNS Security uses threat intelligence to analyze DNS queries and block requests to known malicious domains, disrupting command-and-control communications and malware distribution.

Question 4

What is the purpose of an Anti-Spyware profile in a Palo Alto security policy?

Accepted Answer

To detect and block command-and-control traffic and spyware phone-home communications

Answer

Anti-Spyware profiles detect and block spyware and malware that has already been installed on endpoints from communicating with external command-and-control infrastructure.

Question 5

Which Palo Alto feature provides real-time URL categorization for sites not yet in the local PAN-DB cache?

Accepted Answer

PAN-DB Cloud Lookup

Answer

When a URL is not found in the local PAN-DB cache, the firewall performs a real-time cloud lookup against PAN-DB to retrieve the current category.

PCNSE Exam Practice Test

PCNSE Exam Practice Test

PCNSE URL Filtering and Application Control 3