1.4 Implement Continuous Security Scanning of Allowed Traffic to Stop Malware and Exploits NETWORK-SECURITY-ARCHITECT Practice Questions (Page 3)

Questions 11–15

1. 11foundation · easy

   What is the primary consideration when configuring security policies to enable continuous scanning of allowed traffic?

   • AApplying scanning to all allowed traffic without disrupting legitimate operations
   • BDisabling logging to improve performance
   • CEnsuring that all traffic is denied by default
   • DUsing only signature-based detection to avoid false positives
   Reveal Solution Discussion Select an answer first
2. 12foundation · easy

   Which threat prevention feature is specifically designed to block access to known malicious websites?

   • AAntivirus
   • BURL filtering
   • CAnti-spyware
   • DVulnerability protection
   Reveal Solution Discussion Select an answer first
4. 13foundation · easy

   Which traffic inspection technique uses a controlled environment to execute suspicious files and observe their behavior?

   • ABehavioral analysis
   • BSandboxing
   • CSignature-based detection
   • DURL filtering
   Reveal Solution Discussion Select an answer first
5. 14foundation · easy

   What is a common method to optimize scanning performance while maintaining security coverage?

   • AIncreasing the logging level to maximum
   • BUsing hardware acceleration and traffic segmentation
   • CApplying all security profiles to all traffic
   • DDisabling all security profiles to reduce latency
   Reveal Solution Discussion Select an answer first
6. 15foundation · easy

   How does WildFire help in continuous security scanning of allowed traffic?

   • AIt blocks all traffic that is not explicitly allowed
   • BIt provides a log of all allowed traffic for compliance purposes
   • CIt analyzes unknown files and links in allowed traffic to detect zero-day threats
   • DIt inspects allowed traffic for known signatures only
   Reveal Solution Discussion Select an answer first