PCNSA · Question #399
In which two Security Profiles can an action equal to the block IP feature be configured? (Choose two.)
The correct answer is C. Vulnerability Protection D. Anti-spyware. The 'Block IP' action - which blocks all traffic from a source IP for a configurable duration - is available only in Vulnerability Protection (C) and Anti-Spyware (D) profiles. In Vulnerability Protection, rules can be set to block the attacker or victim IP when an exploit…
Question
In which two Security Profiles can an action equal to the block IP feature be configured? (Choose two.)
Options
- AAntivirus
- BURL Filtering
- CVulnerability Protection
- DAnti-spyware
How the community answered
(27 responses)- A4% (1)
- B4% (1)
- C93% (25)
Explanation
The 'Block IP' action - which blocks all traffic from a source IP for a configurable duration - is available only in Vulnerability Protection (C) and Anti-Spyware (D) profiles. In Vulnerability Protection, rules can be set to block the attacker or victim IP when an exploit signature matches. In Anti-Spyware, DNS signatures and threat signatures can similarly trigger a timed block of the offending IP. Antivirus profiles (A) support actions like block, alert, allow, and drop-file, but not 'Block IP.' URL Filtering profiles (B) use actions such as allow, block, continue, and override - none of which are the IP-level block action.
Topics
Community Discussion
No community discussion yet for this question.