Palo Alto Networks System Engineer – Strata — Question 99

Which action can prevent users from unknowingly downloading potentially malicious file types from the internet?

Answer options

• A. Apply a File Blocking profile to Security policy rules that allow general web access.
• B. Apply a Zone Protection profile to the untrust zone.
• C. Assign a Vulnerability profile to Security policy rules that deny general web access.
• D. Assign an Antivirus profile to Security policy rules that deny general web access.

Correct answer: A

Explanation

Applying a File Blocking profile is effective because it specifically targets and restricts certain file types that may be harmful, thereby preventing downloads of potentially malicious files. The other options focus on different security measures that do not directly address the issue of file type restrictions for user downloads.