WildFire can discover zero-day malware in which three types of traffic? (Choose three)

ASMTP

BHTTPS

CFTP

DDNS

ETFTP

Answer : A, B, C

In Panorama, which three reports or logs will help identify the inclusion of a host source in a command-and-control (C2) incident? (Choose three.)

ASaaS reports

Bdata filtering logs

CWildFire analysis reports

Dthreat logs

Ebotnet reports

Answer : C, D, E

What is the recommended way to ensure that firewalls have the most current set of signatures for up-to-date protection?

ARun a Perl script to regularly check for updates and alert when one is released

BMonitor update announcements and manually push updates to Crewall

CStore updates on an intermediary server and point all the firewalls to it

DUse dynamic updates with the most aggressive schedule required by business needs

Answer : D

Which of the following statements is valid with regard to Domain Name System (DNS) sinkholing?

Ait requires the Vulnerability Protection profile to be enabled

BDNS sinkholing signatures are packaged and delivered through Vulnerability Protection updates

Cinfected hosts connecting to the Sinkhole Internet Protocol (IP) address can be identified in the traffic logs

DIt requires a Sinkhole license in order to activate

Answer : C

A customer with a fully licensed Palo Alto Networks firewall is concerned about threats based on domain generation algorithms (DGAS).

Which Security profile is used to configure Domain Name Security (DNS) to Identity and block

previously unknown DGA-based threats in real time?

AURL Filtering profile

BWildFire Analysis profile

CVulnerability Protection profile

DAnti-Spyware profile

Answer : D

Free Practice Questions for Palo Alto Networks PSE-Strata Exam