Which of the following is a type of intelligence produced by Unit 42?

Firewall configuration templates

Real-time sandbox analysis reports

Antivirus engine comparison charts

Threat briefs and indicators of compromise

What is a known limitation of VirusTotal?

It relies heavily on known signatures, which may miss new or unknown malware

It is only available to Palo Alto Networks customers

It does not support file uploads

What does a WildFire verdict of 'grayware' indicate about a file?

The file is definitely malicious and should be blocked

The file is safe and poses no risk

The file has potentially unwanted behavior but is not clearly malicious

The file is attempting to steal credentials

A security analyst at a mid-sized company needs to submit a suspicious email attachment to WildFire for analysis. The attachment is a Windows executable that was quarantined by the email gateway. The analyst wants to submit the file without leaving their workstation and without requiring access to the firewall management interface. Which submission method best fits this requirement?

Place the file in a shared folder monitored by the firewall's file-blocking profile.

Send the file to the firewall's WildFire inline analysis engine.

Upload the file to the WildFire portal using a web browser.

Email the executable to a public VirusTotal address for scanning.

A malware analyst is researching a new strain of ransomware. The analyst wants to see if any other security researchers have uploaded samples of this ransomware to a public platform and if there are any comments or discussions about its behavior. Which VirusTotal feature would be most useful for this research?

Community contributions and comments

Palo Alto NetworksCertified Security Operations Professional

Domain 2Objective 6

2.6 Compare and Contrast WildFire, Unit 42 Intelligence, and VirusTotal SECURITY-OPERATIONS-PROFESSIONAL Practice Questions (Page 5)

Part of the Threat Intelligence and Incident / Case Response domain, which accounts for 16% of the SECURITY-OPERATIONS-PROFESSIONAL exam.

36questions here

8free pages

12concepts

16%of the exam

Questions 21–25

21foundation · easy
Which of the following is a type of intelligence produced by Unit 42?
Select an answer first
22foundation · easy
What is a known limitation of VirusTotal?
Select an answer first
23foundation · easy
What does a WildFire verdict of 'grayware' indicate about a file?
Select an answer first
24application · medium
A security analyst at a mid-sized company needs to submit a suspicious email attachment to WildFire for analysis. The attachment is a Windows executable that was quarantined by the email gateway. The analyst wants to submit the file without leaving their workstation and without requiring access to the firewall management interface. Which submission method best fits this requirement?
Select an answer first
25application · medium
A malware analyst is researching a new strain of ransomware. The analyst wants to see if any other security researchers have uploaded samples of this ransomware to a public platform and if there are any comments or discussions about its behavior. Which VirusTotal feature would be most useful for this research?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to SECURITY-OPERATIONS-PROFESSIONAL

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Palo Alto Networks. “SECURITY-OPERATIONS-PROFESSIONAL” is a trademark of its owner, used for identification only.

2.6 Compare and Contrast WildFire, Unit 42 Intelligence, and VirusTotal SECURITY-OPERATIONS-PROFESSIONAL Practice Questions (Page 5)

Questions 21–25

Which of the following is a type of intelligence produced by Unit 42?

What is a known limitation of VirusTotal?

What does a WildFire verdict of 'grayware' indicate about a file?

Keep studying — Threat Intelligence and Incident / Case Response