PCNSE PCNSE Advanced Threat Prevention 2

Question 1

Which WildFire verdict type indicates a file has been analyzed and found to contain malicious behavior?

Accepted Answer

Malicious

Answer

WildFire assigns a 'Malicious' verdict when dynamic or static analysis confirms the file contains harmful code or behavior.

Question 2

In a PAN-OS Antivirus security profile, what does the 'Wildfire Analysis' action do when set to 'Send' for unknown files?

Accepted Answer

Forwards the file to WildFire for analysis while allowing the session to continue

Answer

The 'Send' action uploads unknown files to WildFire for cloud-based analysis without blocking the in-progress session.

Question 3

What is the default WildFire public cloud update interval for signatures after a malicious verdict is issued?

Accepted Answer

Every 15 minutes

Answer

WildFire pushes updated antivirus signatures to subscribers every 15 minutes by default after issuing a malicious verdict.

Question 4

An administrator wants to use DNS Sinkholing. What must be configured on the firewall to enable this feature?

Accepted Answer

An Anti-Spyware security profile with DNS Sinkhole enabled

Answer

DNS Sinkholing is configured within an Anti-Spyware security profile, where you specify the sinkhole IP address for malicious DNS queries.

Question 5

Which log type shows WildFire submission and verdict information on a Palo Alto Networks firewall?

Accepted Answer

WildFire Submissions log

Answer

The WildFire Submissions log records file submissions, file types, verdicts, and associated session details.

PCNSE Exam Practice Test