ExamGecko
Question list
Search
Search

Question 190 - PCNSA discussion

Report
Export

Which DNS Query action is recommended for traffic that is allowed by Security policy and matches Palo Alto Networks Content DNS Signatures?

A.
block
Answers
A.
block
B.
sinkhole
Answers
B.
sinkhole
C.
alert
Answers
C.
alert
D.
allow
Answers
D.
allow
Suggested answer: B

Explanation:

To enable DNS sinkholing for domain queries using DNS security, you must activate your DNS Security subscription, create (or modify) an Anti-Spyware policy to reference the DNS Security service, configure the log severity and policy settings for each DNS signature category, and then attach the profile to a security policy rule.

https://docs.paloaltonetworks.com/pan-os/10-1/pan-os-admin/threat-prevention/dnssecurity/enable-dns-security

asked 23/09/2024
K W
25 questions
User
Your answer:
0 comments
Sorted by

Leave a comment first