PCNSE · Question #504
WildFire will submit for analysis blocked files that match which profile settings?
The correct answer is D. files matching Anti-Virus signatures. WildFire on PAN-OS will submit files for cloud-based analysis even when those files have been blocked by the Antivirus profile based on matching known Anti-Virus signatures. This behavior ensures that Palo Alto Networks can collect and analyze known malicious samples to improve…
Question
WildFire will submit for analysis blocked files that match which profile settings?
Options
- Afiles matching Anti-Spyware signatures
- Bfiles that are blocked by URL filtering
- Cfiles that are blocked by a File Blocking profile
- Dfiles matching Anti-Virus signatures
How the community answered
(47 responses)- B4% (2)
- C2% (1)
- D94% (44)
Explanation
WildFire on PAN-OS will submit files for cloud-based analysis even when those files have been blocked by the Antivirus profile based on matching known Anti-Virus signatures. This behavior ensures that Palo Alto Networks can collect and analyze known malicious samples to improve detection capabilities and threat intelligence. Files blocked by a File Blocking profile are stopped based on file type rules and are not forwarded to WildFire for analysis. Anti-Spyware profiles block command-and-control traffic and spyware, not file submissions. URL filtering blocks web categories, not file submissions to WildFire. Only files matching Anti-Virus signatures (option D) are submitted to WildFire even after being blocked, supporting continuous threat intelligence.
Topics
Community Discussion
No community discussion yet for this question.