PSE-STRATA practice question 1 of 25
Which two email links, contained in SMTP and POP3, can be submitted from WildFire analysis with a WildFire subscription? (Choose two.)
Full set: 139 questionsWhen a Palo Alto Networks firewall with an active WildFire subscription is configured for email link analysis, it can extract and forward specific types of links from SMTP and POP3 traffic. This feature is designed to combat web-based threats delivered via email, such as phishing and links to malware-hosting sites. The firewall specifically forwards links that use the HTTP and HTTPS protocols to the WildFire cloud for a verdict. WildFire then visits the link in a sandboxed environment to determine if the destination is malicious.
A. FTP: While the firewall can inspect files within FTP traffic, the specific feature for forwarding links from emails for analysis is targeted at web protocols.
C. RTP: The Real-time Transport Protocol is used for delivering streaming audio and video; it is not a protocol for hyperlinks that would be analyzed for malicious web content.
Palo Alto Networks. (2023). PAN-OS® Administrator’s Guide 10.2. "WildFire Analysis for Links in Email." This section explicitly states, "The firewall can be configured to forward HTTP and HTTPS links in email messages to the WildFire analysis cloud."
Palo Alto Networks. (2023). WildFire® Administrator’s Guide 10.2. "Configure WildFire Analysis." The guide details the setup for forwarding different sample types, including email links, specifying HTTP and HTTPS as the supported protocols for this feature.
Keep practicing
Take the free PSE-STRATA practice test
Ten exam-style questions with answers and explanations, plus the exam facts and study guides.
More questions
Other PSE-STRATA practice questions
- Question 2Which four actions can be configured in an Anti-Spyware profile to address command-and-co…
- Question 3Which two types of security chains are supported by the Decryption Broker? (Choose two.)
- Question 4Which two features are key in preventing unknown targeted attacks? (Choose two)
- Question 5A company has deployed the following • VM-300 firewalls in AWS • endpoint protection with…
- Question 6Which Palo Alto Networks security component should an administrator use to and NGFW polic…
- Question 7Which three script types can be analyzed in WildFire? (Choose three)
