Domain 4 - Securing Traffic

Question 1

If you have a Threat Prevention subscription but not a WildFire subscription, how long must you wait for the WildFire signatures to be added into the antivirus update?
a. 1 to 2 hours
b. 2 to 4 hours
c. 10 to 12 hours
d. 24 to 48 hours

Answer 1

D. 24 to 48 Hours

Question 2

What are two benefits of Vulnerability Protection Security profiles? (Chose two)
a. They prevent compromised hosts from trying to communicate with external C2 servers.
b. They protect against viruses, worms and Trojans.
c. They prevent exploitation of system flaws.
d. They prevent unauthorized access to systems.

Answer 2

c. They prevent exploitation of system flaws.
d. They prevent unauthorized access to systems.

Question 3

Which two actions are available for Antivirus Security profiles? (Choose two)
a. Continue
b. Allow
c. Block IP
d. Alert

Answer 3

b. Allow
d. Alert

Question 4

Which two actions are required to implement DNS Security inspections of traffic? (Choose two)
a. Add an Anti-Spyware Security profile with DNS remediations to a Security policy.
b. Enable the Advanced DNS Security check box in General Settings.
c. Configure an Anti-Spyware Security profile with DNS remediations.
d. Enter the address for the Secure DNS service in the firewall’s DNS settings

Answer 4

a. Add an Anti-Spyware Security profile with DNS remediations to a Security policy.
c. Configure an Anti-Spyware Security profile with DNS remediations

Question 5

Which two types of attacks does the PAN-DB prevent? (Choose two)
a. Phishing site
b. HTTP-based command and control
c. Infected Javascript
d. Flood attacks

Answer 5

a. Phishing site
b. HTTP-based command and control

Question 6

Which two valid URLs can be used in a custom URL category? (Choose two)
a. www.youtube.**
b. www.**.com
c. www.youtube.com
d. youtube
e. *.youtube.com

Answer 6

c. www.youtube.com
e. *.youtube.com

Question 7

A URL Filtering Profile is part of which type of identification?
a. App-ID
b. Content-ID
c. User-ID
d. Service

Answer 7

b. Content-ID

Question 8

What are the two components of Denial-of-Service Protection? (Choose two)
a. Zone Protection Profile
b. DoS Protection Profile and policy rules
c. Load Protection
d. Reconnaissance protection

Answer 8

a. Zone Protection Profile
b. DoS Protection Profile and policy rules