nerdexam
Palo_Alto_Networks

NETSEC-ANALYST · Question #214

Which built-in IP address EDL would be useful for preventing traffic from IP addresses that are verified as unsafe based on WildFire analysis Unit 42 research and data gathered from telemetry?

The correct answer is D. Palo Alto Networks Known Malicious IP Addresses. Palo Alto Networks Known Malicious IP Addresses --Contains IP addresses that are verified malicious based on WildFire analysis, Unit 42 research, and data gathered from telemetry (Share Threat Intelligence with Palo Alto Networks). Attackers use these IP addresses almost…

Threat Prevention

Question

Which built-in IP address EDL would be useful for preventing traffic from IP addresses that are verified as unsafe based on WildFire analysis Unit 42 research and data gathered from telemetry?

Options

  • APalo Alto Networks C&C IP Addresses
  • BPalo Alto Networks Bulletproof IP Addresses
  • CPalo Alto Networks High-Risk IP Addresses
  • DPalo Alto Networks Known Malicious IP Addresses

How the community answered

(20 responses)
  • A
    5% (1)
  • B
    15% (3)
  • C
    10% (2)
  • D
    70% (14)

Explanation

Palo Alto Networks Known Malicious IP Addresses --Contains IP addresses that are verified malicious based on WildFire analysis, Unit 42 research, and data gathered from telemetry (Share Threat Intelligence with Palo Alto Networks). Attackers use these IP addresses almost exclusively to distribute malware, initiate command-and-control activity, and launch attacks. https://docs.paloaltonetworks.com/pan-os/9-1/pan-os-admin/policy/use-an-external-dynamic-list- in-policy/built-in-edls

Topics

#EDL#WildFire#Known Malicious IP Addresses#Unit 42 threat intel

Community Discussion

No community discussion yet for this question.

Full NETSEC-ANALYST Practice