WildFire machine learning (ML) for portable executable (PE) files is enabled in the antivirus profile and added to the appropriate firewall rules in the profile. In the Palo Alto Networks WildFire…

Question

Options

• Ashow wfml cloud-status
• Bshow mlav cloud-status
• Cshow ml cloud-status
• Dshow av cloud-status

• A
  9% (3)
• B
  70% (23)
• C
  3% (1)
• D
  18% (6)

Explanation

Option B, show mlav cloud-status, is correct because mlav stands for Machine Learning Anti-Virus - the specific PAN-OS subsystem that handles WildFire ML-based detection for PE files within the antivirus profile. This command queries the cloud connectivity and operational status of that ML engine, confirming whether it is active and receiving cloud updates.

The distractors fail for distinct reasons: A (show wfml cloud-status) uses a non-existent keyword - WildFire-related commands use wildfire as their keyword, not wfml. C (show ml cloud-status) is too generic and is not a valid PAN-OS CLI construct. D (show av cloud-status) is also invalid syntax - traditional AV status is checked differently and does not surface the ML-specific cloud connection.

Memory tip: Break down the command - ml (machine learning) + av (antivirus) = mlav. Whenever the question involves the ML layer inside an AV profile, the command keyword will be mlav, not wildfire or plain av.

No community discussion yet for this question.