A WildFire subscription is required for which two of the following activities? (Choose two)

Question

Options

• AFilter uniform resource locator (URL) sites by category.
• BForward advanced file types from the firewall for analysis.
• CUse the WildFire Application Programming Interface (API) to submit website links for analysis
• DEnforce policy based on Host Information Profile (HIP)
• EDecrypt Secure Sockets Layer (SSL)

• A
  9% (3)
• B
  76% (26)
• D
  12% (4)
• E
  3% (1)

Explanation

WildFire is Palo Alto Networks' cloud-based sandbox service, so a subscription is required specifically when you're sending content to WildFire for analysis: forwarding advanced file types (B) uses WildFire's sandbox to detonate suspicious files beyond the basic set, and submitting URLs via the WildFire API (C) directly invokes the WildFire cloud service - both are core WildFire functions gated behind the subscription.

The distractors each belong to different feature sets: A (URL filtering by category) requires a URL Filtering subscription (PAN-DB/BrightCloud), not WildFire; D (HIP-based policy enforcement) is part of GlobalProtect and requires a GlobalProtect subscription; E (SSL decryption) is a built-in firewall capability requiring no additional subscription at all.

Memory tip: WildFire subscription = anything where the firewall sends content to WildFire for cloud analysis - files forwarded for sandboxing, or submissions via the WildFire API. If the feature doesn't involve shipping data to the WildFire cloud, a WildFire license isn't the answer.

No community discussion yet for this question.