Palo Alto Networks (PANW) Certified Cybersecurity Entry-level Technician (PCCET) Practice Exam

Which type of malware protection has a problem with legitimate software upgrades?

1. Signature-based

2. Container-based

3. Application allow lists

4. Anomaly detection

The correct answer is: Application allow lists

The type of malware protection that has a problem with legitimate software upgrades is application allow lists. This form of protection operates by creating a list of applications that are permitted to run on a system. While this approach can effectively prevent unauthorized or malicious software from executing, it can pose challenges when it comes to updating legitimate software. When a legitimate application receives an update, the new version may not be on the allow list. As a result, the updated software might be blocked from executing until the new version is added to the list. This can lead to delays in receiving critical updates or may require manual intervention to adjust the allow list frequently, which could diminish the overall effectiveness of security measures. Therefore, while application allow lists can provide strong security by limiting what is allowed to run, they can complicate the process of maintaining up-to-date and functional software on systems.