PCNSA · Question #229
What are two valid selections within an Antivirus profile? (Choose two.)
The correct answer is B. drop C. default. Within an Antivirus profile, 'drop' and 'default' are two valid actions that an administrator can select to specify how the firewall handles detected malicious files.
Question
What are two valid selections within an Antivirus profile? (Choose two.)
Options
- Adeny
- Bdrop
- Cdefault
- Dblock-ip
How the community answered
(61 responses)- A3% (2)
- B90% (55)
- D7% (4)
Why each option
Within an Antivirus profile, 'drop' and 'default' are two valid actions that an administrator can select to specify how the firewall handles detected malicious files.
'Deny' is a general action for security policy rules, not a specific action for file-based threats within an Antivirus profile.
The 'drop' action in an Antivirus profile causes the firewall to silently discard any session or file identified as malicious, preventing its delivery to the client.
The 'default' action applies the predefined default handling for a detected antivirus threat, often leading to blocking or dropping the malicious content based on system defaults or specific file type settings.
'Block-IP' is typically an action used in other threat profiles like Anti-Spyware or Vulnerability Protection to block malicious source/destination IPs, not a primary action in Antivirus profiles for file content.
Concept tested: Antivirus profile actions
Source: https://docs.paloaltonetworks.com/pan-os/10-2/pan-os-admin/threat-prevention/configure-anti-virus-and-anti-spyware-profiles/configure-anti-virus-profiles
Topics
Community Discussion
No community discussion yet for this question.