Which three file types can be forwarded to WildFire for analysis as a part of the basic WildFire service?

Which three file types can be forwarded to WildFire for analysis as a part of the basic WildFire service? (Choose three.)
A. .dll
B. .exe
C. .src
D. .apk
E. .pdf
F. .jar

Download Printable PDF. VALID exam to help you PASS.

20 thoughts on “Which three file types can be forwarded to WildFire for analysis as a part of the basic WildFire service?

  1. ABC is correct, it’s asking for basic WildFire service, means without Subscription it must work. PE format doesn’t require subscription.

  2. the correct answer is A B C as per the following PA Docs links

    The basic WildFire service is included as part of the Palo Alto Networks next generation firewall and does not require a WildFire subscription. With the basic WildFire service, the firewall can forward portable executable (PE) files for WildFire analysis, and can retrieve WildFire signatures only with antivirus and/or Threat Prevention updates which are made available every 24-48 hours.
    https://docs.paloaltonetworks.com/wildfire/9-1/wildfire-admin/wildfire-overview/wildfire-subscription

    Portable Executable (PE) files. PEs include executable files, object code, DLLs, FON (fonts), and LNK files. A subscription is not required to forward PE files for WildFire analysis, but is required for all other supported file types.
    https://docs.paloaltonetworks.com/wildfire/9-1/wildfire-admin/wildfire-overview/wildfire-concepts/file-analysis.html

  3. With the basic WildFire service, you can enable the firewall to forward portable executable (PE) files.

    Portable Executable (PE) files. PEs include executable files, object code, DLLs, FON (fonts), and LNK files. A subscription is not required to forward PE files for WildFire analysis, but is required for all other supported file types.

    ABC is the right answer

  4. It should be D, E, F

    WildFire File Type Support: supported for analysis in the WildFire cloud environments
    https://docs.paloaltonetworks.com/wildfire/7-1/wildfire-admin/wildfire-overview/wildfire-file-type-support

    AND as per Forward Files for WildFire Analysis, it is CLEARLY mentioned “Portable Executables (PEs) or any files” so they are BOTH ACCEPTABLE.
    https://docs.paloaltonetworks.com/wildfire/7-1/wildfire-admin/submit-files-for-wildfire-analysis/forward-files-for-wildfire-analysis

    It will NEVER be A, B, C because nothing mentioned on the above Reference Links the word “dll, .exe, src” BUT it says Portable Executable (or PE).

  5. It should be D, E, F

    WildFire File Type Support: supported for analysis in the WildFire cloud environments
    https://docs.paloaltonetworks.com/wildfire/7-1/wildfire-admin/wildfire-overview/wildfire-file-type-support

    AND as per Forward Files for WildFire Analysis, it is CLEARLY mentioned “Portable Executables (PEs) or any files” so they are BOTH ACCEPTABLE.
    https://docs.paloaltonetworks.com/wildfire/7-1/wildfire-admin/submit-files-for-wildfire-analysis/forward-files-for-wildfire-analysis

    It will NEVER be A, B, C because nothing mentioned on the above Reference Links the word “dll, .exe, src” BUT it says Portable Executable (or PE).

  6. ABC

    Basic does only PE.

    pe
    Portable Executable (PE) files. PEs include executable files, object code, DLLs, and FON (fonts). A subscription is not required to forward PE files for WildFire analysis, but is required for all other supported file types.

  7. Confusing Questions But here is the trick.

    There are two types of usage services available on the wildfire platform
    1. Standard Subscription service
    2. Wildfire Licensed Service
    Standard file analysis has EXE, DLL, SRC, FCR, others

    While the Wildfire licensed service includes everything the standard has including Microsoft Office, PDF, JAR, CLASS, SWF, SWG, APk, MACH-O, DMG and PKG files

    Answer is therefore ABC

Leave a Reply

Your email address will not be published. Required fields are marked *


The reCAPTCHA verification period has expired. Please reload the page.