2.6 Compare and Contrast WildFire, Unit 42 Intelligence, and VirusTotal SECURITY-OPERATIONS-PROFESSIONAL Practice Questions (Page 2)

Questions 6–10

1. 6application · medium

   A security analyst is preparing a presentation for management about the latest threats facing the organization's industry. The analyst needs to cite a credible source that provides expert analysis of threat actor motivations, attack methodologies, and future trends. Which source is the most appropriate to reference?

   • AA Unit 42 research report on a recent campaign targeting the industry.
   • BA WildFire verdict report for a single malicious file.
   • CA VirusTotal community comment on a related malware sample.
   • DAn internal firewall log showing blocked malicious traffic.
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   What type of information is typically included in a Unit 42 threat report?

   • ADetailed analysis of a malware campaign, including attack vectors and IOCs
   • BInstructions for configuring firewall security policies
   • CA list of all files submitted to WildFire in the last 24 hours
   • DA comparison of antivirus detection rates for a specific file
   Reveal Solution Discussion Select an answer first
4. 8foundation · easy

   Which of the following is a key feature of VirusTotal?

   • AAutomatic blocking of malicious traffic on the network
   • BExecution of files in a sandbox to observe behavior
   • CScanning of files and URLs using multiple antivirus engines
   • DPublication of in-depth threat research reports
   Reveal Solution Discussion Select an answer first
5. 9application · medium

   A network administrator wants to configure the Palo Alto Networks firewall to automatically send unknown files to WildFire for analysis when they are first seen on the network. The administrator's goal is to ensure that new and potentially malicious files are analyzed without requiring manual intervention. Which configuration is required on the firewall to achieve this?

   • AManually upload files to the WildFire portal on a regular basis.
   • BCreate a custom URL filtering category for WildFire submissions.
   • CConfigure a syslog server to send files to WildFire.
   • DEnable the WildFire inline analysis option in the security policy rule.
   Reveal Solution Discussion Select an answer first
6. 10application · easy

   A security analyst is investigating a phishing email that contains a link to a suspicious website. The analyst wants to check if the URL is known to be malicious by multiple security vendors and also wants to see if other users have submitted comments about the site. Which VirusTotal feature is most appropriate for this task?

   • AURL scanning
   • BFile scanning
   • CAPI integration
   • DCommunity forum
   Reveal Solution Discussion Select an answer first