Which four actions can be configured in an Anti-Spyware profile to address command-and-control traffic from compromised hosts? (Choose four.)

An Anti-Spyware profile on a Palo Alto Networks NGFW allows an administrator to define how the firewall responds to detected spyware and command-and-control (C2) traffic. Within the profile's rules, several actions can be configured. These include allow (permit the traffic), alert (generate a log entry but allow traffic), drop (silently discard the packets), and various reset actions (reset-client, reset-server, reset-both) which actively terminate the TCP connection. These four actions provide a range of responses from passive monitoring to active prevention of C2 communications.

A. Quarantine: This action is specific to the WildFire Analysis profile for handling malicious files, not for real-time C2 traffic inspection in an Anti-Spyware profile.
D. Redirect: This action is primarily used in URL Filtering profiles to send users to a specific webpage (e.g., a block page), not an available action for C2 threats.

1. Palo Alto Networks. (2022). PAN-OS® Administrator’s Guide Version 10.2. "Configure an Anti-Spyware Profile", pp. 488-490. This section details the available actions for rules within an Anti-Spyware profile, listing allow, alert, drop, reset-client, reset-server, and reset-both.

2. Palo Alto Networks TechDocs. "Anti-Spyware Profile Actions". The official documentation lists and describes the valid actions that can be taken on a threat signature match, which include the four correct options.