Paloalto Networks Network Security Administrator NetSec-Generalist Question # 7 Topic 1 Discussion

To preventdata exfiltration in outbound traffic,Next-Generation Firewalls (NGFWs)must have the followingsecurity profiles configured and updated:

Data Filtering (✔️Correct)

Detects and preventssensitive data leaksin outbound traffic.

Monitors forPersonally Identifiable Information (PII), financial data, and intellectual property.

Canalert, block, or quarantineattempts to send confidential information externally.

File Blocking (✔️Correct)

Preventsunauthorized file transfersover email, cloud storage, and web uploads.

Blocks file typescommonly used for exfiltration, such as.zip, .docx, .csv, and .txt.

Helps stopcovert data exfiltration through disguised files.

B. DoS Protection❌

Incorrect, becauseDoS Protection prevents volumetric attacksbut does not stopdata exfiltration attempts.

D. Antivirus❌

Incorrect, becauseAntivirus detects malware, notsensitive data transfers.

Firewall Deployment– Preventsunauthorized data leaksthrough outbound connections.

Security Policies– Enforcescontent-based and file-based exfiltration prevention.

VPN Configurations– Ensuresencrypted VPNs do not become data exfiltration channels.

Threat Prevention– Monitors forinsider threats and advanced persistent threats (APTs)attempting exfiltration.

WildFire Integration– Detectsmalware that might be exfiltrating data.

Zero Trust Architectures– Preventsunauthorized data movement across network zones.

Why Other Options Are Incorrect?References to Firewall Deployment and Security Features:Thus, the correct answers are:✅A. Data Filtering✅C. File Blocking