You receive notification about new malware that infects hosts through malicious files transferred by FTP.
Which Security profile detects and protects your internal networks from this threat after you update your firewall’s threat signature database?
You receive notification about new malware that infects hosts through malicious files transferred by FTP.
Which Security profile detects and protects your internal networks from this threat after you update your firewall’s threat signature database?
The appropriate Security profile to detect and protect against malware infecting hosts through malicious files transferred via FTP is the Antivirus profile applied to inbound Security policy rules. Antivirus profiles are designed to detect and block malware in various file transfers, including FTP, by leveraging the updated threat signature database. This profile inspects network traffic for known malware signatures and prevents infected files from entering the network.
Antivirus prevent from malware downloading
Option D Data filtering profiles are used for: Use Data Filtering profiles to prevent sensitive, confidential, and proprietary information from leaving your network. Predefined patterns, built-in settings, and customizable options make it easy for you to protect files that contain certain file properties (such as a document title or author), credit card numbers, regulated information from different countries (like social security numbers), and third-party data loss prevention (DLP) labels. https://docs.paloaltonetworks.com/network-security/security-policy/security-profiles/security-profile-data-filtering
Antivirus The default profile inspects all the listed protocol decoders for viruses and generates alerts for the SMTP, IMAP, and POP3 protocols while blocking the FTP, HTTP, and SMB protocols. (PCNSA) | Study Guide p86
Answer should be D. The antivirus profile detects malware in the traffic stream and prevents them from being downloaded. Naturally the firewall becomes aware of the latest threats after updating its database.
I vote for B
Sorry It's my fault, D is the right answer.
Answer B. You go to an FTP server. Therefor an OUTBOUND rule. Makes only B a viable answer.