Palo Alto Networks Certified Network Security Engineer (PCNSE) — Question 66

An administrator has been asked to configure a Palo Alto Networks NGFW to provide protection against external hosts attempting to exploit a flaw in an operating system on an internal system.
Which Security Profile type will prevent this attack?

Answer options

• A. Vulnerability Protection
• B. Anti-Spyware
• C. URL Filtering
• D. Antivirus

Correct answer: A

Explanation

The correct answer is A, Vulnerability Protection, as it specifically targets and prevents exploitation of known vulnerabilities in operating systems and applications. The other options, while useful for different types of threats, do not specifically mitigate the risk of vulnerabilities being exploited. Anti-Spyware focuses on detecting and blocking spyware, URL Filtering manages web access, and Antivirus protects against malware but does not specifically address vulnerability exploits.