PCNSE · Question #558
An administrator discovers that a file blocked by the WildFire inline ML feature on the firewall is a false-positive action. How can the administrator create an exception for this particular file?
The correct answer is A. Add partial hash and filename in the file section of the WildFire inline ML tab of the Antivirus. The File Exceptions table allows you to define specific files that you do not want analyzed, such as false-positives. To create a new file exception entry, Add a new entry and provide the partial hash, filename, and description of the file that you want to exclude from…
Question
An administrator discovers that a file blocked by the WildFire inline ML feature on the firewall is a false-positive action. How can the administrator create an exception for this particular file?
Options
- AAdd partial hash and filename in the file section of the WildFire inline ML tab of the Antivirus
- BSet the WildFire inline ML action to allow for that protocol on the Antivirus profile.
- CAdd the related Threat ID in the Signature exceptions tab of the Antivirus profile.
- DDisable the WildFire profile on the related Security policy.
How the community answered
(52 responses)- A73% (38)
- B15% (8)
- C8% (4)
- D4% (2)
Explanation
The File Exceptions table allows you to define specific files that you do not want analyzed, such as false-positives. To create a new file exception entry, Add a new entry and provide the partial hash, filename, and description of the file that you want to exclude from enforcement. https://docs.paloaltonetworks.com/pan-os/10-2/pan-os-admin/threat-prevention/wildfire-inline- ml/configure-wildfire-inline-ml
Topics
Community Discussion
No community discussion yet for this question.