Palo Alto Networks (PANW) Certified Cybersecurity Entry-level Technician (PCCET) Practice Exam

Which NGFW core subscription allows your firewall to block users when they attempt to submit their credentials to a phishing site?

1. DNS Security

2. URL Filtering

3. Threat Prevention

4. WildFire

The correct answer is: URL Filtering

The core subscription that enables a next-generation firewall (NGFW) to block users when they attempt to submit their credentials to a phishing site is URL Filtering. This subscription is specifically designed to categorize and control web traffic based on the types of content being accessed. Phishing sites often trick users into providing sensitive information, and URL Filtering helps by identifying such malicious URLs and enforcing policies to prevent users from accessing them. When enabled, URL Filtering works by checking the destination of a website against a database of known categories. If a site is identified as a phishing site, the NGFW can block access to it, thereby protecting users from inadvertently revealing their credentials. This proactive defense is crucial in safeguarding sensitive information from cyber threats. While the other subscriptions provide important security features, they focus on different aspects of threat protection. For example, DNS Security helps in preventing malware and command-and-control traffic, Threat Prevention focuses on detecting and mitigating threats from known vulnerabilities and malware, and WildFire is designed for advanced threat detection through dynamic analysis of unknown files. However, none of these specifically targets user interactions with phishing sites like URL Filtering does.