Exam PCNSA All QuestionsBrowse all questions from this exam
Question 199

Which built-in IP address EDL would be useful for preventing traffic from IP addresses that are verified as unsafe based on WildFire analysis, Unit 42 research, and data gathered from telemetry?

    Correct Answer: B

    The Palo Alto Networks Known Malicious IP Addresses list contains IP addresses that are verified as malicious based on WildFire analysis, Unit 42 research, and data gathered from telemetry. These IP addresses are used almost exclusively to distribute malware, initiate command-and-control activity, and launch attacks, making this list the most appropriate for preventing traffic from verified unsafe IP addresses.

Discussion
mushi4kaOption: B

https://docs.paloaltonetworks.com/pan-os/9-1/pan-os-admin/policy/use-an-external-dynamic-list-in-policy/built-in-edls

TheGamesOption: B

https://docs.paloaltonetworks.com/pan-os/11-0/pan-os-admin/policy/use-an-external-dynamic-list-in-policy/built-in-edls Palo Alto Networks Known Malicious IP Addresses—Contains IP addresses that are verified malicious based on WildFire analysis, Unit 42 research, and data gathered from telemetry (share threat intelligence with Palo Alto Networks). Attackers use these IP addresses almost exclusively to distribute malware, initiate command-and-control activity, and launch attacks.

NajmmmOption: B

https://docs.paloaltonetworks.com/pan-os/9-1/pan-os-admin/policy/use-an-external-dynamic-list-in-policy/built-in-edls