A customer claims that Advanced WildFire miscategorized a file as malicious and wants proof, because another vendor has said that the file is benign. How could the systems engineer assure the…

Question

Options

• AReview the threat logs for information to provide to the customer.
• BUse the WildFire Analysis Report in the log to show the customer the malicious actions the file
• COpen a TAG ticket for the customer and allow support engineers to determine the appropriate
• DDo nothing because the customer will realize Advanced WildFire is right.

• A
  8% (3)
• B
  84% (31)
• C
  5% (2)
• D
  3% (1)

Explanation

Advanced WildFire is Palo Alto Networks' cloud-based malware analysis and prevention solution. It determines whether files are malicious by executing them in a sandbox environment and observing their behavior. To address the customer's concern about the file categorization, the systems engineer must provide evidence of the file's behavior. Option B: WildFire generates an analysis report that includes details about the file's behavior during detonation in the sandbox, such as network activity, file modifications, process executions, and any indicators of compromise (IoCs). This report provides concrete evidence to demonstrate why the file was flagged as malicious. It is the most accurate way to assure the customer that WildFire's decision was based on observed malicious actions.

No community discussion yet for this question.