Palo Alto Networks Certified Network Security Engineer (PCNSE) — Question 509

A security team has enabled eal-time WildFire signature lookup on all its firewalls. Which additional action will further reduce the likelihood of newly discovered malware being allowed through the firewalls?

Answer options

• A. Enable the "Hold Mode" option in Objects > Security Profiles > Antivirus
• B. Increase the frequency of the applications and threats dynamic updates
• C. Increase the frequency of the antivirus dynamic updates
• D. Enable the "Report Grayware Files" option in Device > Setup > WildFire

Correct answer: A

Explanation

Enabling the 'Hold Mode' option allows the firewall to prevent the deployment of potentially harmful updates until they have been thoroughly validated, thus reducing the risk of newly discovered malware being permitted. The other options, while they enhance the overall security posture, do not specifically address the immediate reduction of risk from new malware signatures as effectively as 'Hold Mode' does.