An administrator receives a notification about new malware that is being used to attack hosts. The malware exploits a software bug in a common application. Which Security Profile will detect and block access to this threat after the administrator updates the firewall's threat signature database?

Question

Accepted Answer

A. Vulnerability Profile applied to inbound Security policy rules A Vulnerability Protection profile specifically detects and prevents attempts to exploit system vulnerabilities and software bugs, making it the appropriate security profile for this type of threat. Applying it to inbound rules ensures protection for internal hosts from attacks originating outside the network.

Answer

B. Antivirus Profile applied to outbound Security policy rules An Antivirus Profile primarily detects and blocks known viruses, spyware, and other malware downloads, but not necessarily exploits against software bugs.

Answer

C. Data Filtering Profile applied to outbound Security policy rules A Data Filtering Profile is used for Data Loss Prevention (DLP) to prevent sensitive information from leaving the network, not for detecting incoming malware exploits.

Answer

D. Data Filtering Profile applied to inbound Security policy rules A Data Filtering Profile is for Data Loss Prevention (DLP) and would not detect incoming malware exploiting software bugs.

An administrator receives a notification about new malware that is being used to attack hosts. The malware exploits a software bug in a common application. Which Security Profile will detect and block

Question

Options

How the community answered

Why each option

Topics

Community Discussion