Palo Alto Networks System Engineer – Strata — Question 61

A customer has business-critical applications that rely on the general web-browsing application. Which security profile can help prevent drive-by-downloads while still allowing web-browsing traffic?

Answer options

• A. File Blocking Profile
• B. DoS Protection Profile
• C. URL Filtering Profile
• D. Vulnerability Protection Profile

Correct answer: A

Explanation

The correct answer is A, the File Blocking Profile, which is specifically designed to prevent malicious files from being downloaded during web browsing. The other options, such as DoS Protection, URL Filtering, and Vulnerability Protection profiles, do not focus on blocking specific file types that are commonly associated with drive-by downloads.