Exam PCNSA topic 1 question 359 discussion

A. You block the malware inbound from attacking your host using the common application.

The correct answer is: A. Vulnerability Profile applied to inbound Security policy rules Vulnerability Profiles are used to detect and block exploits against known vulnerabilities in software applications. The administrator's notification indicated that the new malware exploits a software bug in a common application. By applying a Vulnerability Profile to inbound Security policy rules, the administrator can block all attempts to exploit this vulnerability, even if the malware is not yet known to the firewall's threat signature database.

I'm going with A on this one. https://docs.paloaltonetworks.com/network-security/security-policy/security-profiles/security-profile-vulnerability-protection

A because B is for outbound policies

I would go with B, as it is malware.