The CFO found a malware infected USB drive in the parking lot, which when inserted infected their corporate laptop. The malware contacted a known command- and-control server, which caused the infected

Question

Options

• ACreate an anti-spyware profile and enable DNS Sinkhole feature.
• BCreate an antivirus profile and enable its DNS Sinkhole feature.
• CCreate a URL filtering profile and block the DNS Sinkhole URL category
• DCreate a Data Filtering Profiles and enable its DNS Sinkhole feature.

• A
  84% (54)
• B
  9% (6)
• C
  3% (2)
• D
  3% (2)

Explanation

Anti-Spyware - Detects spyware downloads and command-and-control traffic from previously installed spyware Anti-Spyware Security Profiles Anti-Spyware security profiles block spyware on compromised hosts from trying to communicate with external command-and-control (C2) servers, thus enabling you to detect malicious traffic leaving the network from infected clients. DNS Sinkhole should be considered only for traffic that includes DNS queries. URL Filtering Web Security: Most attacks and exposure to malicious content occur during normal web browsing activities. URL filtering with PAN-DB automatically prevents attacks that leverage the web as an attack vector, including phishing links in emails, phishing sites, HTTP-based command-and-control, malicious sites, and pages that carry exploit kits. Antivirus: Includes new and updated antivirus signatures, including WildFire signatures and automatically-generated command-and-control (C2) signatures. WildFire signatures detect malware seen first by firewalls from around the world.

No community discussion yet for this question.