Exam PCNSA All QuestionsBrowse all questions from this exam
Question 337

With the PAN-OS 11.0 Nova release, which two attack options can new inline deep learning analysis engines detect and prevent? (Choose two.)

    Correct Answer: A, C

    With the PAN-OS 11.0 Nova release, the new inline deep learning analysis engines can detect and prevent both command injection attacks and SQL injection attacks. This is because the new engines are specifically designed to analyze traffic for such vulnerabilities in real-time to protect users against zero-day threats.

Discussion
baccalaccaOption: C

answer = C https://docs.paloaltonetworks.com/pan-os/11-0/pan-os-new-features/content-inspection-features/vuln-protection-inline-cloud-analysis Palo Alto Networks now operates new inline deep learning detection engines in the Advanced Threat Prevention cloud to analyze traffic for command injection and SQL injection vulnerabilities in real-time to protect users against zero-day threats. By operating cloud-based detection engines, you can access a wide array of detection mechanisms that are updated and deployed automatically without requiring the user to download update packages or operate process intensive, firewall-based analyzers which can sap resources. Inline cloud analysis for your firewall Vulnerability Protection profile supports two analysis engines: SQL injection and Command injection. Additional analysis models are delivered through content updates, however, enhancements to existing models are performed as a cloud-side update, requiring no firewall update. Inline cloud analysis is enabled and configured using the Vulnerability Protection profile and requires an active Advanced Threat Prevention license.

hdrnzienlaoroljolOptions: AC

A and C Palo Alto Networks now operates new inline deep learning detection engines in the Advanced Threat Prevention cloud to analyze traffic for command injection and SQL injection vulnerabilities in real-time to protect users against zero-day threats. (https://docs.paloaltonetworks.com/pan-os/11-0/pan-os-new-features/content-inspection-features/vuln-protection-inline-cloud-analysis)

DatITGuyTho1337Options: AC

I picked wrong (BC), but looking at the other comments, the answer should be A C.

monterrosaOption: A

A y C Palo Alto Networks now operates new inline deep learning detection engines in the Advanced Threat Prevention cloud to analyze traffic for command injection and SQL injection vulnerabilities in real-time to protect users against zero-day threats

cjaceOptions: AC

So, among the options you provided, Command injection attacks (Option A) and SQL injection attacks (Option C) are the attack options that new inline deep learning analysis engines can detect and prevent with the PAN-OS 11.0 Nova release

scanossaOption: C

A and C

[Removed]Option: A

A & C are correct

KalenderOption: A

A and C Palo Alto Networks now operates new inline deep learning detection engines in the Advanced Threat Prevention cloud to analyze traffic for command injection and SQL injection vulnerabilities in real-time to protect users against zero-day threats. (https://docs.paloaltonetworks.com/pan-os/11-0/pan-os-new-features/content-inspection-features/vuln-protection-inline-cloud-analysis)