ExamGecko
Question list
Search
Search

Question 389 - 156-315.81 discussion

Report
Export

How does the Anti-Virus feature of the Threat Prevention policy block traffic from infected websites?

A.
By dropping traffic from websites identified through ThreatCloud Verification and URL Caching
Answers
A.
By dropping traffic from websites identified through ThreatCloud Verification and URL Caching
B.
By dropping traffic that is not proven to be from clean websites in the URL Filtering blade
Answers
B.
By dropping traffic that is not proven to be from clean websites in the URL Filtering blade
C.
By allowing traffic from websites that are known to run Antivirus Software on servers regularly
Answers
C.
By allowing traffic from websites that are known to run Antivirus Software on servers regularly
D.
By matching logs against ThreatCloud information about the reputation of the website
Answers
D.
By matching logs against ThreatCloud information about the reputation of the website
Suggested answer: D

Explanation:

The Anti-Virus feature of the Threat Prevention policy blocks traffic from infected websites by matching logs against ThreatCloud information about the reputation of the website. ThreatCloud is a collaborative network that collects and analyzes threat data from millions of sources worldwide. It assigns a reputation score to each website based on its malicious activity and behavior. If a website has a low reputation score, it is considered infected and blocked by the Anti-Virus blade.

Reference:Training & Certification | Check Point Software, CCSE section

asked 16/09/2024
Joseph Lewis
44 questions
User
Your answer:
0 comments
Sorted by

Leave a comment first