What file type upload is supported as part of the basic WildFire service?
What file type upload is supported as part of the basic WildFire service?
The basic WildFire service supports the upload of Portable Executable (PE) files. The service is designed to analyze these types of files to detect malware and other security threats. ELF, BAT, and VBS files require the advanced WildFire subscription, which provides additional support for a broader range of file types. Therefore, PE is the correct answer.
Correct C - https://docs.paloaltonetworks.com/wildfire/9-1/wildfire-admin/wildfire-overview/wildfire-subscription.html
Correct C
https://docs.paloaltonetworks.com/wildfire/10-2/wildfire-admin/wildfire-overview/wildfire-subscription
It say the basic subscrition. ELF is in advance subscription.
C. With the basic WildFire service, the firewall can forward portable executable (PE) files for WildFire analysis,
the question refers to "Basic wildfire" PE is listed under "Advanced file support" the one that isn't is ELF https://docs.paloaltonetworks.com/wildfire/10-2/wildfire-admin/wildfire-overview/wildfire-subscription --- WildFire Inline ML—(PAN-OS 10.0 and later) Prevent malicious variants of portable executables, executable and linked format (ELF) files, and PowerShell scripts.... --- WildFire Advanced File Type Support—....
From your URL -> With the basic WildFire service, the firewall can forward portable executable (PE) files for WildFire analysis
C is correct
https://docs.paloaltonetworks.com/advanced-wildfire/administration/advanced-wildfire-overview/advanced-wildfire-subscription#:~:text=With%20the%20basic%20WildFire%20service,available%20every%2024%2D48%20hours.
" File Type Support—In addition to PEs, forward advanced file types for Advanced WildFire analysis, including APKs, Flash files, PDFs, Microsoft Office files, Java Applets, Java files (.jar and .class), and HTTP/HTTPS email links contained in SMTP and POP3 email messages. (WildFire private cloud analysis does not support APK, Mac OS X, Linux (ELF), archive (RAR/7-Zip), and script (JS, BAT, VBS, Shell Script, PS1, and HTA) files) "
Answer C =====> With the basic WildFire service, you can enable the firewall to forward portable executable (PE) files. Refer to https://docs.paloaltonetworks.com/pan-os/10-2/pan-os-admin/getting-started/enable-basic-wildfire-forwarding
By elimination it should be C. ELF, BAT and VBS are in the advanced file type support : WildFire Advanced File Type Support—In addition to PEs, forward advanced file types for WildFire analysis, including APKs, Flash files, PDFs, Microsoft Office files, Java Applets, Java files (.jar and .class), and HTTP/HTTPS email links contained in SMTP and POP3 email messages. (WildFire private cloud analysis does not support APK, Mac OS X, Linux (ELF), archive (RAR/7-Zip), and script (JS, BAT, VBS, Shell Script, PS1, and HTA) files). link : https://docs.paloaltonetworks.com/wildfire/10-2/wildfire-admin/wildfire-overview/wildfire-subscription
"the firewall can forward portable executable (PE) files for WildFire analysis" https://docs.paloaltonetworks.com/wildfire/10-2/wildfire-admin/wildfire-overview/wildfire-subscription
refer to gully300 documentation