nerdexam
Palo_Alto_Networks

PCNSA · Question #229

What are two valid selections within an Antivirus profile? (Choose two.)

The correct answer is B. drop C. default. Within an Antivirus profile, 'drop' and 'default' are two valid actions that an administrator can select to specify how the firewall handles detected malicious files.

Submitted by jordan8· Apr 18, 2026Securing Traffic

Question

What are two valid selections within an Antivirus profile? (Choose two.)

Options

  • Adeny
  • Bdrop
  • Cdefault
  • Dblock-ip

How the community answered

(61 responses)
  • A
    3% (2)
  • B
    90% (55)
  • D
    7% (4)

Why each option

Within an Antivirus profile, 'drop' and 'default' are two valid actions that an administrator can select to specify how the firewall handles detected malicious files.

Adeny

'Deny' is a general action for security policy rules, not a specific action for file-based threats within an Antivirus profile.

BdropCorrect

The 'drop' action in an Antivirus profile causes the firewall to silently discard any session or file identified as malicious, preventing its delivery to the client.

CdefaultCorrect

The 'default' action applies the predefined default handling for a detected antivirus threat, often leading to blocking or dropping the malicious content based on system defaults or specific file type settings.

Dblock-ip

'Block-IP' is typically an action used in other threat profiles like Anti-Spyware or Vulnerability Protection to block malicious source/destination IPs, not a primary action in Antivirus profiles for file content.

Concept tested: Antivirus profile actions

Source: https://docs.paloaltonetworks.com/pan-os/10-2/pan-os-admin/threat-prevention/configure-anti-virus-and-anti-spyware-profiles/configure-anti-virus-profiles

Topics

#Antivirus Profile#Security Profiles#Threat Prevention#Firewall Configuration

Community Discussion

No community discussion yet for this question.

Full PCNSA Practice