PCNSA Question 114

Community Discussion

Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.

• 2

  The correct answer is D. Vulnerability Protection Profile applied to inbound Security policy rules. Vulnerability Protection Profiles are designed to detect and block attempts to exploit software bugs in common applications. When a new malware is identified and the firewall’s threat signature database is updated, the Vulnerability Protection Profile can detect and block access to this threat. This profile is typically applied to inbound Security policy rules to protect the network from external threats.

• Chose D2

  Vulnerability Protection profiles stop attempts to exploit system flaws or gain unauthorized access to systems. While Anti-Spyware profiles help identify infected hosts as traffic leaves the network, Vulnerability Protection profiles protect against threats entering th e network. For example, Vulnerability Protection profiles help protect against buffer overflows, illegal code execution, and other attempts to exploit system vulnerabilities. [Palo Alto Networks]

• Chose D3

  I would think that D is the most accurate because it can detect and block traffic which uses known vulnererabilies. But AntiVirus could help to avoid downloading the malware itself.. But how the question sounds, it's more likely D what they want to hear.