1.4 Implement Continuous Security Scanning of Allowed Traffic to Stop Malware and Exploits NETWORK-SECURITY-ARCHITECT Practice Questions (Page 1)

Questions 1–5

1. 1foundation · easy

   What is the primary purpose of integrating WildFire into a security architecture?

   • ATo provide a VPN for remote users
   • BTo filter web traffic based on URL categories
   • CTo replace the need for signature-based detection
   • DTo identify unknown malware and exploits through cloud-based sandboxing
   Reveal Solution Discussion Select an answer first
2. 2application · medium

   A company has a policy that allows employees to download files from the internet. The security team has noticed that some files are not detected by traditional signature-based antivirus. The team wants to implement a solution that can identify new and unknown malware by analyzing behavior in a controlled environment. Which approach should the security architect take?

   • AEnable vulnerability protection to detect exploits in downloaded files.
   • BEnable behavioral analysis on the firewall to monitor file behavior in real time.
   • CConfigure the firewall to block all files that are not signed by a trusted publisher.
   • DIntegrate WildFire to send suspicious files to a cloud sandbox for analysis.
   Reveal Solution Discussion Select an answer first
4. 3foundation · easy

   Which threat prevention feature is primarily used to detect and block malware that is transmitted through allowed traffic?

   • AData filtering
   • BUser-ID
   • CAntivirus
   • DURL filtering
   Reveal Solution Discussion Select an answer first
5. 4application · medium

   A security architect is reviewing the threat prevention strategy for a company that uses a mix of known and unknown applications. The architect wants to ensure that both known malware and unknown malware are detected. Which combination of techniques should the architect use?

   • AUse sandboxing for all files to identify unknown malware.
   • BUse signature-based detection for known malware and behavioral analysis for unknown malware.
   • CUse only signature-based detection to identify known malware.
   • DUse only behavioral analysis to identify unknown malware.
   Reveal Solution Discussion Select an answer first
6. 5foundation · easy

   In a security policy, what is the role of security profiles when enabling continuous scanning?

   • AThey determine the routing path for allowed traffic
   • BThey define which users can access the firewall
   • CThey specify the inspection and threat prevention actions applied to allowed traffic
   • DThey control the physical interfaces used for traffic
   Reveal Solution Discussion Select an answer first