Palo Alto Networks System Engineer – SASE — Question 45

What can prevent users from unknowingly downloading potentially malicious file types from the internet?

Answer options

• A. Apply a File Blocking profile to Security policy rules that allow general web access.
• B. Apply a Zone Protection profile to the untrust zone.
• C. Assign an Antivirus profile to Security policy rules that deny general web access.
• D. Assign a Vulnerability profile to Security policy rules that deny general web access.

Correct answer: A

Explanation

The correct answer is A because applying a File Blocking profile to Security policy rules can specifically prevent certain file types from being downloaded, thus protecting users from malicious files. Options B, C, and D do not directly prevent the downloading of harmful file types; Zone Protection profiles and Antivirus profiles focus on different aspects of security, and denying general web access does not address the issue of file downloads.