A security analyst at a financial services firm receives an alert that an employee clicked a link in a phishing email. The firewall's URL filtering blocked the initial page, but the email attachment was downloaded and executed on the endpoint before the block took effect. The analyst needs to determine whether the attachment contains unknown malware and, if so, ensure the firewall can block it for other users. Which CDSS capability should the analyst rely on to accomplish this?

Review the URL Filtering logs to identify the category of the phishing site and block that category globally

Submit the attachment to WildFire for cloud-based sandboxing and automatically deploy any generated signatures to the firewall

Enable DNS Security to block the phishing domain and prevent other users from resolving it

Configure Enterprise DLP to scan the attachment for sensitive financial data patterns

How do Palo Alto Networks firewalls receive CDSS updates?

Through USB drives shipped by Palo Alto Networks

Through peer-to-peer sharing with other firewalls

Through cloud-delivered updates and subscriptions

Through manual downloads from a local server

A school district wants to block access to social media and gaming websites during school hours but allow access after hours. The district also wants to ensure that newly discovered malicious websites are blocked automatically. Which CDSS capability should the district configure on its firewall?

DNS Security with a static block list

Threat Prevention with manual signature updates

URL Filtering with time-based policies and cloud-delivered updates

WildFire with local file analysis

What is the primary function of CDSS Threat Prevention?

To sandbox unknown files in a cloud environment

To provide real-time threat intelligence and automated protection against known and unknown threats

To block access to malicious websites based on URL categories

To monitor and control IoT device behavior

How does CDSS Threat Prevention obtain its threat intelligence?

From a local database that is updated manually by administrators

From cloud-delivered updates that provide real-time threat intelligence

From a static signature file that is refreshed quarterly

From peer-to-peer sharing with other firewalls

Palo Alto NetworksCertified Cybersecurity Practitioner

Domain 2Objective 8

2.8 Identify and Describe Palo Alto Networks Cloud-Delivered Security Services (CDSS) CYBERSECURITY-PRACTITIONER Practice Questions (Page 4)

Part of the Network Security domain, which accounts for 19% of the CYBERSECURITY-PRACTITIONER exam.

31questions here

7free pages

9concepts

19%of the exam

Questions 16–20

16application · medium
A security analyst at a financial services firm receives an alert that an employee clicked a link in a phishing email. The firewall's URL filtering blocked the initial page, but the email attachment was downloaded and executed on the endpoint before the block took effect. The analyst needs to determine whether the attachment contains unknown malware and, if so, ensure the firewall can block it for other users. Which CDSS capability should the analyst rely on to accomplish this?
Select an answer first
17foundation · easy
How do Palo Alto Networks firewalls receive CDSS updates?
Select an answer first
18application · medium
A school district wants to block access to social media and gaming websites during school hours but allow access after hours. The district also wants to ensure that newly discovered malicious websites are blocked automatically. Which CDSS capability should the district configure on its firewall?
Select an answer first
19foundation · easy
What is the primary function of CDSS Threat Prevention?
Select an answer first
20foundation · easy
How does CDSS Threat Prevention obtain its threat intelligence?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CYBERSECURITY-PRACTITIONER

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Palo Alto Networks. “CYBERSECURITY-PRACTITIONER” is a trademark of its owner, used for identification only.