PCCET · Question #134
Which NGFW core subscription allows your firewall to block users when they attempt to submit their credentials to a phishing site?
The correct answer is B. URL Filtering. URL Filtering is the NGFW core subscription that enables the firewall to block user access to malicious websites, including those identified as phishing sites designed to steal credentials.
Question
Which NGFW core subscription allows your firewall to block users when they attempt to submit their credentials to a phishing site?
Options
- ADNS Security
- BURL Filtering
- CThreat Prevention
- DWildFire
How the community answered
(29 responses)- A7% (2)
- B90% (26)
- C3% (1)
Why each option
URL Filtering is the NGFW core subscription that enables the firewall to block user access to malicious websites, including those identified as phishing sites designed to steal credentials.
DNS Security primarily protects against malicious DNS activity, such as DNS-based attacks or accessing command-and-control servers, rather than directly blocking access to a known phishing URL.
URL Filtering allows the NGFW to categorize web traffic and block access to specific categories of websites, including known phishing sites. By inspecting the URL requested by the user, the firewall can identify if it's a phishing site and prevent the user from accessing it and submitting credentials.
Threat Prevention focuses on blocking known threats like exploits, spyware, and viruses by signature matching, but it doesn't specifically target and block access to phishing URLs based on their categorization.
WildFire is a cloud-based service for identifying unknown and zero-day threats by analyzing suspicious files and URLs, but URL Filtering is the subscription that leverages this intelligence to actively block access to newly identified malicious sites.
Concept tested: NGFW core subscriptions (URL Filtering for phishing)
Source: https://docs.paloaltonetworks.com/pan-os/10-2/pan-os-admin/url-filtering.html
Topics
Community Discussion
No community discussion yet for this question.