What can prevent users from unknowingly downloading potentially malicious file types from the internet?

Question

Options

• AApply a File Blocking profile to Security policy rules that allow general web access.
• BApply a Zone Protection profile to the untrust zone.
• CAssign an Antivirus profile to Security policy rules that deny general web access.
• DAssign a Vulnerability profile to Security policy rules that deny general web access.

• A
  81% (46)
• B
  4% (2)
• C
  11% (6)
• D
  5% (3)

Explanation

A is correct because a File Blocking profile lets administrators control which file types can be uploaded or downloaded through the firewall - applying it to Security policy rules that allow web access is where it makes sense, since those are the rules permitting the traffic you want to inspect and restrict.

B is wrong because Zone Protection profiles guard against network-layer attacks (floods, reconnaissance, spoofing) at the zone level - they don't inspect file content or types within allowed sessions.

C and D are wrong for two reasons: Antivirus profiles detect known malware signatures (not file types by category), and Vulnerability profiles detect exploit attempts against known CVEs - neither specifically blocks file types. More critically, applying any security profile to rules that deny traffic is pointless, since denied traffic never reaches the profile inspection engine.

Memory tip: Think "File Blocking goes where files flow" - on allow rules, where traffic is actually permitted through. If the rule blocks traffic, nothing gets inspected.

No community discussion yet for this question.