Policy Action Options:
allow—The DNS query is allowed. ...
block—The DNS query is blocked.
sinkhole—Forges a DNS response for a DNS query targeting a detected malicious domain.
Enable DNS Security --> https://docs.paloaltonetworks.com/dns-security/administration/configure-dns-security/enable-dns-security
"Select an action to be taken when DNS lookups are made to known malware sites for the DNS Security signature source. The options are default, allow, block, or sinkhole. Verify that the action is set to sinkhole."
A,B and D
A,B,D - The options for the action to be taken when DNS lookups are made to known malware sites for the DNS Security signature source under the Action on DNS Queries column are alert, allow, block, and sinkhole
In the DNS policies tab of the Anti-Spyware Security profile, there are 4 policy actions:
default, allow, block and sinkhole.
Therefore A, B and D is correct
Anwers ABE
Policy Action
Choose an action to take when DNS lookups are made to known malware sites. The options are alert, allow, block, or sinkhole. The default action for Palo Alto Networks DNS signatures is sinkhole.
A, B, D, and E are viable options according to this link:
https://docs.paloaltonetworks.com/pan-os/9-1/pan-os-admin/threat-prevention/dns-security/enable-dns-security
ABDE
Policy Action
Choose an action to take when DNS lookups are made to known malware sites. The options are alert, allow, block, or sinkhole. The default action for Palo Alto Networks DNS signatures is sinkhole.
https://docs.paloaltonetworks.com/pan-os/11-0/pan-os-web-interface-help/objects/objects-security-profiles-anti-spyware-profile
upvoted 4 times
...
This section is not available anymore. Please use the main Exam Page.PCNSA Exam Questions
Log in to ExamTopics
Sign in:
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
Jackie26
Highly Voted 1 year, 8 months agondamico
Most Recent 4 months agode7cdfd
5 months, 1 week agoToto86
5 months, 2 weeks agoALCOSTA35
6 months, 2 weeks agowesth4m1234
6 months, 3 weeks agohackeryorch
10 months, 4 weeks agocjace
11 months, 3 weeks agoufukbaygin
1 year, 1 month agoAredus
1 year, 1 month agoMoSayel
1 year, 1 month agoKvant
1 year, 9 months agoZeruz
1 year, 9 months agoSanjug2022
1 year, 10 months agoDlaEdu_Ex
1 year, 11 months ago