Vulnerability Protection profile actions define how the firewall responds when an exploit signature is matched. - Option A (Incorrect): 'Allow' is not a typical action for detected exploit attempts; the goal is to prevent the exploitation. - Option B (Correct): 'Alert' generates a log entry and notification without preventing the traffic. Useful for monitoring or testing. - Option C (Correct): 'Block' terminates the session and drops the malicious packets, preventing the exploit from reaching the target. This is a common preventative action. - Option D (Correct): 'Reset Server' (or 'Reset Client', 'Reset Both') injects TCP reset packets into the stream to cleanly terminate the connection. This can be useful for preventing server processes from entering an unstable state after an attempted exploit. - Option E (Incorrect): While quarantining endpoints is a response capability often integrated via platforms like Cortex XDR or network access control (NAC), it is not a direct action within the Vulnerability Protection profile itself on the NGFW.