Which two actions can be configured in an Anti-Spyware profile to address command-and-control (C2) traffic from compromised hosts? (Choose two.)
Which two actions can be configured in an Anti-Spyware profile to address command-and-control (C2) traffic from compromised hosts? (Choose two.)
In an Anti-Spyware profile, the actions 'Alert' and 'Reset' can be configured to address command-and-control (C2) traffic from compromised hosts. 'Alert' generates a log entry when such traffic is detected, enabling monitoring and analysis. 'Reset' can disrupt the C2 communication by resetting the connection. These actions provide a way to both notify administrators and mitigate the threat.
BD Correct Actions: Allow Alert Drop Reset Client Reset Server Reset Both Block IP https://docs.paloaltonetworks.com/network-security/security-policy/administration/security-profiles/security-profile-anti-spyware