2.8 Identify and Describe Palo Alto Networks Cloud-Delivered Security Services (CDSS) CYBERSECURITY-PRACTITIONER Practice Questions (Page 3)

Questions 11–15

1. 11foundation · easy

   What happens after WildFire identifies a file as malicious?

   • AThe user is notified via email to take manual action
   • BThe file is automatically deleted from the user's device
   • CThe file is quarantined in the cloud for further analysis
   • DA signature is generated and distributed to firewalls to block the threat
   Reveal Solution Discussion Select an answer first
2. 12expert · hard

   An organization is evaluating how to handle a new, unknown malware strain that was discovered in an isolated lab environment. The malware is polymorphic and changes its signature each time it runs. The security team wants to ensure that the firewall can detect and block this malware across the enterprise, even though traditional signature-based detection may not be effective. Which CDSS approach should the team use?

   • AEnable DNS Security to block the malware's command-and-control domains
   • BUse Enterprise DLP to inspect the malware for sensitive data patterns
   • CSubmit a sample to WildFire for behavioral analysis and rely on the generated behavioral signature to block the malware
   • DConfigure URL Filtering to block the download source of the malware
   Reveal Solution Discussion Select an answer first
4. 13application · medium

   A managed security service provider (MSSP) manages firewalls for multiple clients and wants to offer a consistent set of security services across all clients without deploying additional hardware. The MSSP wants to enable threat prevention, URL filtering, and DNS security for each client through the cloud. Which approach should the MSSP take?

   • AInstall third-party security software on each client's endpoints
   • BUse only local signatures and update them manually
   • CActivate the appropriate CDSS subscriptions on each client's firewall and manage them centrally
   • DDeploy a separate physical appliance for each client
   Reveal Solution Discussion Select an answer first
5. 14application · medium

   A hospital network administrator needs to prevent staff from accessing gambling and adult content websites while allowing access to medical research sites. The administrator also wants to ensure that newly discovered malicious websites are blocked without requiring manual policy updates. Which combination of CDSS features should the administrator configure on the firewall?

   • AEnable URL Filtering with a custom policy that blocks the gambling and adult categories, and ensure the URL Filtering subscription is active for cloud-delivered category updates
   • BEnable Threat Prevention and set the action for all URL categories to alert
   • CEnable WildFire and configure it to categorize all web traffic
   • DEnable DNS Security and create a block list for gambling and adult domains
   Reveal Solution Discussion Select an answer first
6. 15application · medium

   A small business has a single Palo Alto Networks firewall and wants to enhance its security posture by adding multiple cloud-delivered security services without deploying additional hardware. The business wants to enable real-time threat prevention, web filtering, and DNS protection through the firewall's existing management interface. Which approach should the administrator take?

   • AConfigure the firewall to use only local signatures and manually update them
   • BInstall third-party security software on each endpoint
   • CActivate the Threat Prevention, URL Filtering, and DNS Security subscriptions on the firewall and ensure it can reach the Palo Alto Networks cloud services
   • DDeploy a separate physical appliance for each security service
   Reveal Solution Discussion Select an answer first