PSE-STRATA practice question 24 of 25

Which three new script types can be analyzed in WildFire? (Choose three.)

Full set: 139 questions
Answer options
A: VBScript Correct answer
B: JScript Correct answer
C: MonoScript
D: PythonScript
E: PowerShell Script Correct answer
Correct Answer:
A. VBScript; B. JScript; E. PowerShell Script
Explanation

Palo Alto Networks WildFire introduced advanced analysis for script-based attacks in PAN-OS 9.0. This update specifically added the capability to analyze VBScript, JScript, and PowerShell files. These scripts are commonly used in fileless malware and other advanced attacks. While Python script analysis was added later in PAN-OS 10.0, the initial major enhancement for script analysis, which is often what "new" refers to in this context, included VBScript, JScript, and PowerShell. These capabilities allow WildFire to detect malicious behavior within these scripts that might otherwise evade traditional detection methods.

Why Incorrect

C. MonoScript: This is not a standard scripting language and is not listed as a supported file type for WildFire analysis in Palo Alto Networks documentation.
D. PythonScript: While WildFire does analyze Python scripts, this feature was introduced in PAN-OS 10.0, a later release than the one that introduced VBScript, JScript, and PowerShell analysis.

References

1. Palo Alto Networks. (2018). PAN-OS® New Features Guide Version 9.0. "WildFire Script Analysis", p. 10. This document states, "WildFire now analyzes PowerShell, VBScript, and JScript files to detect and prevent fileless and file-based malware attacks that use these scripting languages."

2. Palo Alto Networks. (2020). PAN-OS® New Features Guide Version 10.0. "WildFire Python Script Analysis", p. 11. This document details the addition of Python script analysis in a subsequent major release.

3. Palo Alto Networks. (2023). WildFire Administrator's Guide PAN-OS 11.0. "WildFire File Type Support". This guide lists VBScript, JScript, PowerShell, and Python as supported script types for analysis.

Scroll to Top