PCNSE · Question #446
The manager of the network security team has asked you to help configure the company's Security Profiles according to Palo Alto Networks best practice. As part of that effort, the manager has assigned
The correct answer is C. action 'reset-both' and packet capture 'single-packet'. Best Practice Internet Gateway Vulnerability Protection Profile 10.2 says "reset-both" and "single- https://docs.paloaltonetworks.com/best-practices/10-2/internet-gateway-best-practices/best- practice-internet-gateway-security-policy/create-best-practice-security-
Question
The manager of the network security team has asked you to help configure the company's Security Profiles according to Palo Alto Networks best practice. As part of that effort, the manager has assigned you the Vulnerability Protection profile for the internet gateway firewall. Which action and packet-capture setting for items of high severity and critical severity best matches Palo Alto Networks best practice'?
Options
- Aaction 'reset-both' and packet capture 'extended-capture'
- Baction 'default' and packet capture 'single-packet'
- Caction 'reset-both' and packet capture 'single-packet'
- Daction 'reset-server' and packet capture 'disable'
How the community answered
(61 responses)- A3% (2)
- B15% (9)
- C75% (46)
- D7% (4)
Explanation
Best Practice Internet Gateway Vulnerability Protection Profile 10.2 says "reset-both" and "single- https://docs.paloaltonetworks.com/best-practices/10-2/internet-gateway-best-practices/best- practice-internet-gateway-security-policy/create-best-practice-security-
Topics
Community Discussion
No community discussion yet for this question.