Exam PSE Strata All QuestionsBrowse all questions from this exam
Question 21

Which three features are used to prevent abuse of stolen credentials? (Choose three.)

    Correct Answer: A, B, E

    Multi-factor authentication is one of the key methods used to prevent the abuse of stolen credentials by requiring additional verification beyond simply a password. URL Filtering Profiles help block access to malicious or phishing websites, which are common methods of obtaining and abusing stolen credentials. SSL decryption rules are important because they enable inspection of encrypted traffic, which can carry malicious payloads or connections to malicious sites intended to exploit stolen credentials. Collectively, these three features enhance security by addressing various methods of credential compromise and abuse.

Discussion
AOtwomaOptions: ABE

https://docs.paloaltonetworks.com/pan-os/9-1/pan-os-admin/threat-prevention/prevent-credential-phishing/set-up-credential-phishing-prevention#idc77030dc-6022-4458-8c50-1dc0fe7cffe4

mushi4kaOptions: ABE

Multi Factor Authentication, URL filter, SSL Decryption https://docs.paloaltonetworks.com/pan-os/9-1/pan-os-admin/threat-prevention/prevent-credential-phishing

GabranchOptions: ABC

Conflicted but the press release for PAN-OS 8.0 shows WF as a component to recofnizing and blocking phishing sites, preventing credential abuse: https://www.paloaltonetworks.com/company/press/2017/palo-alto-networks-delivers-industry-first-capabilities-to-prevent-credential-theft-and-abuse

yet_another_userOptions: ABE

Agree with A, B and E. Wildfire delivers input for PAN-DB which feeds the URL catalog, but see the steps in links below.

dthensleyOptions: ABC

ABC are the correct answers. https://www.paloaltonetworks.com/company/press/2017/palo-alto-networks-delivers-industry-first-capabilities-to-prevent-credential-theft-and-abuse

ck19Options: ABE

ABE are correct

cheatfaceOptions: ABE

Agreed, it's ABE

fatehzOptions: ABE

Agree with others ABE, C with wildfire is wrong WF is a sandbox

Gabranch

WF scans email for http/https links to phishing sites.

LostatSeaOptions: ABE

ABE, Agree with others