NETSEC-GENERALIST Question #64: Real Exam Question with Answer & Explanation

Question

After a Best Practice Assessment (BPA) is complete, it is determined that dynamic updates for Cloud- Delivered Security Services (CDSS) used by company branch offices do not match recommendations. The snippet used for dynamic updates is currently set to download and install updates weekly. Knowing these devices have the Precision Al bundle, which two statements describe how the settings need to be adjusted in the snippet? (Choose two.)

Options

• AApplications and threats should be updated daily.
• BAntivirus should be updated daily.
• CWildFire should be updated every five minutes.
• DURL filtering should be updated hourly.

Explanation

A Best Practice Assessment (BPA) evaluates firewall configurations against Palo Alto Networks' recommended best practices. In this case, the Cloud-Delivered Security Services (CDSS) update settings do not align with best practices, as they are currently set to weekly updates, which delays threat prevention. Best Practices for Dynamic Updates in the Precision AI Bundle Applications and Threats - Update Daily Regular updates ensure the firewall detects and blocks the latest exploits, vulnerabilities, and Weekly updates are too slow and leave the network vulnerable to newly discovered attacks. WildFire - Update Every Five Minutes WildFire is Palo Alto Networks' cloud-based malware analysis engine, which identifies and mitigates new threats in near real-time. Updating every five minutes ensures that newly discovered malware signatures are applied A weekly update would significantly delay threat response.

No community discussion yet for this question.