問題文
A hospital network team is reviewing why the Vulnerability Protection profile exists as a separate object instead of being folded into the Antivirus profile. What does the Vulnerability Protection profile contribute that the Antivirus profile does not?
選択肢
- It matches signatures for attempts to exploit weaknesses in operating systems and applications, and it lets the analyst set an action per severity.
- It rewrites the payload of the matched session so that the exploit attempt reaches the destination in a harmless form, and the session can continue undisturbed.
- It scans files before they are delivered to the endpoint, which is the same work the Antivirus profile does on the way in so that the two objects overlap in scope.
- It replaces the need for an Antivirus profile on server-facing rules, because exploit signatures already include the file-based malicious code signatures.