Palo Alto Networks System Engineer – Strata — Question 102
Which two actions can be configured in an Anti-Spyware profile to address command-and-control (C2) traffic from compromised hosts? (Choose two.)
Answer options
- A. Redirect
- B. Alert
- C. Quarantine
- D. Reset
Correct answer: B, D
Explanation
The correct answer includes 'Alert' and 'Reset' because these actions are designed to notify administrators of suspicious activity and terminate harmful connections, respectively. 'Redirect' and 'Quarantine' do not specifically target command-and-control traffic in the same direct manner as the selected options.