Which Security profile on the Next-Generation Firewall (NGFW) includes Signatures to protect against brute force attacks?

Question

Options

• AVulnerability Protection profile
• BAntivirus profile
• CURL Filtering profile
• DAnti-Spyware profile

• A
  83% (25)
• B
  3% (1)
• C
  3% (1)
• D
  10% (3)

Explanation

Vulnerability Protection profiles are designed to defend against exploitation attempts on hosts and services, which includes signatures specifically targeting brute force attacks - repeated login attempts used to guess credentials are treated as an exploitation technique against authentication systems.

Antivirus (B) focuses on detecting and blocking malware, viruses, and malicious file transfers, not login-based attacks. URL Filtering (C) controls access to websites by category or reputation and has no role in blocking brute force behavior. Anti-Spyware (D) targets command-and-control traffic and spyware exfiltration, protecting against already-compromised systems phoning home rather than initial intrusion attempts.

Memory tip: Think "Vulnerability Protection = protecting vulnerabilities from being exploited" - brute force is an exploit against weak/unguarded authentication, so it lives there. If it's about attacking a service, it's Vulnerability Protection; if it's about malware on a host, it's Antivirus; if it's about where you go, it's URL Filtering; if it's about malware calling home, it's Anti-Spyware.

No community discussion yet for this question.