Palo Alto Networks Certified Cybersecurity Entry-level Technician (PCCET)Palo Alto Networks TechnologiesMedium
A company is experiencing frequent phishing attacks that often involve users clicking on malicious URLs embedded in emails. They have a Palo Alto Networks NGFW deployed. Which security profile should be configured to prevent users from accessing these known malicious websites?
- AURL Filtering Profile
- BFile Blocking Profile
- CAnti-Spyware Profile
- DVulnerability Protection Profile
Show answer & explanationAnswer & explanation
Correct answer: A. URL Filtering Profile
A URL Filtering Profile is specifically designed to control access to websites based on categories (including malicious ones) and custom lists, effectively preventing users from accessing known phishing sites.
Why the other options are wrong
- B. File Blocking Profile prevents the transfer of specific file types, not access to malicious websites.
- C. Anti-Spyware Profile detects and blocks spyware and command-and-control traffic, not direct access to malicious URLs.
- D. Vulnerability Protection Profile prevents exploits against system vulnerabilities, not URL access.
URL Filtering Profile
A security profile on Palo Alto Networks NGFWs that controls user access to websites based on categories, predefined lists, or custom URLs, used to block malicious or inappropriate web content.
- Categorizes millions of URLs in real-time.
- Can block, allow, or alert based on URL categories.
- Essential for preventing access to phishing sites and other malicious web content.
Memory trick: To filter the web, you need a URL filter.