Exam PCNSA topic 1 question 359 discussion

Actual exam question from Palo Alto Networks's PCNSA

Question #: 359
Topic #: 1

An administrator receives a notification about new malware that is being used to attack hosts. The malware exploits a software bug in a common application.

Which Security Profile will detect and block access to this threat after the administrator updates the firewall's threat signature database?

A. Vulnerability Profile applied to inbound Security policy rules
B. Antivirus Profile applied to outbound Security policy rules
C. Data Filtering Profile applied to outbound Security policy rules
D. Data Filtering Profile applied to inbound Security policy rules

Show Suggested Answer

Suggested Answer: A 🗳️

by DlaEdu_Ex at June 15, 2023, 9:22 p.m.

Comments

Submit Cancel

Adeolu007

7 months, 3 weeks ago

Selected Answer: A

A. You block the malware inbound from attacking your host using the common application.

upvoted 1 times

...

Calica

1 year, 2 months ago

The correct answer is: A. Vulnerability Profile applied to inbound Security policy rules Vulnerability Profiles are used to detect and block exploits against known vulnerabilities in software applications. The administrator's notification indicated that the new malware exploits a software bug in a common application. By applying a Vulnerability Profile to inbound Security policy rules, the administrator can block all attempts to exploit this vulnerability, even if the malware is not yet known to the firewall's threat signature database.

upvoted 3 times

...

dawlims

1 year, 4 months ago

Selected Answer: A

I'm going with A on this one. https://docs.paloaltonetworks.com/network-security/security-policy/security-profiles/security-profile-vulnerability-protection

upvoted 2 times

...