SECOPS-PRO · Question #71
A sophisticated APT group is observed to be rapidly developing and deploying new malware variants. Your organization needs to not only identify these new variants but also understand their attack chai
The correct answer is B. Leveraging WildFire for automated dynamic analysis of unknown files, where new malware. This scenario emphasizes rapid detection, understanding attack chains, and proactive blocking on NGFWs. WildFire is purpose-built for automated dynamic analysis, generating signatures that are automatically distributed to Palo Alto Networks NGFWs, providing immediate protection a
Question
A sophisticated APT group is observed to be rapidly developing and deploying new malware variants. Your organization needs to not only identify these new variants but also understand their attack chains, and proactively update security controls, specifically Palo Alto Networks Next- Generation Firewalls (NGFWs), to block them before they reach endpoints. Given this scenario, which of the following operational flows represents the most effective and efficient integration of threat intelligence sources to achieve this goal?
Options
- ASubmitting suspicious files to VirusTotal for community-driven analysis, then manually creating
- BLeveraging WildFire for automated dynamic analysis of unknown files, where new malware
- CRelying solely on firewall vendor-provided signatures and performing weekly manual updates of
- DImplementing an open-source sandbox for malware analysis and using STIX/TAXII feeds to
- EPrioritizing endpoint security solutions over network-level prevention, as APTs primarily target
How the community answered
(28 responses)- A11% (3)
- B79% (22)
- D7% (2)
- E4% (1)
Explanation
This scenario emphasizes rapid detection, understanding attack chains, and proactive blocking on NGFWs. WildFire is purpose-built for automated dynamic analysis, generating signatures that are automatically distributed to Palo Alto Networks NGFWs, providing immediate protection against new malware variants. Unit 42 intelligence provides the broader context, TTPs, and strategic insights into APT groups, helping to anticipate and proactively defend against their evolving tactics. This integrated approach leverages the strengths of both WildFire's automated technical analysis and Unit 42's human- driven strategic intelligence for comprehensive, proactive defense aligned with Palo Alto Networks capabilities.
Topics
Community Discussion
No community discussion yet for this question.