CyberArk Defender – Endpoint Privilege Manager — Question 1

Which threat intelligence source requires the suspect file to be sent externally?

Answer options

• A. NSRL
• B. Palo Alto Wildfire
• C. VirusTotal
• D. CyberArk Application Risk Analysis Service (ARA)

Correct answer: B

Explanation

The correct answer is Palo Alto Wildfire, as it specifically requires files to be sent to its cloud service for analysis. The other options, while providing various forms of threat intelligence, do not require external submission of files in the same manner as Palo Alto Wildfire.