ExamTopics Logo
Mail Us[email protected]
Menu
Palo-Alto-Networks Discussions
exam questions

Exam PSE Strata All Questions

View all questions & answers for the PSE Strata exam
Go to Exam

Exam PSE Strata topic 1 question 108 discussion

Actual exam question from Palo Alto Networks's PSE Strata
Question #: 108
Topic #: 1
[All PSE Strata Questions]

What will a Palo Alto Networks next-generation firewall (NGFW) do when it is unable to retrieve a DNS verdict from the DNS cloud service in the configured lookup time?

  • A. block the query
  • B. allow the request and all subsequent responses
  • C. temporarily disable the DNS Security function
  • D. discard the request and all subsequent responses
Show Suggested Answer Hide Answer
Suggested Answer: B 🗳️
by f143c37 at June 26, 2023, 3:03 p.m.

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Submit Cancel
ArangoTopics
1 year ago
Selected Answer: B
If the firewall is unable to retrieve a signature verdict in the allotted time due to connectivity issues, the request, including all subsequent DNS responses, are passed through https://docs.paloaltonetworks.com/pan-os/9-1/pan-os-admin/threat-prevention/dns-security/enable-dns-security
upvoted 1 times
...
f143c37
1 year, 1 month ago
Selected Answer: B
https://docs.paloaltonetworks.com/dns-security/administration/configure-dns-security/configure-lookup-timeout
upvoted 1 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel