Exam PCNSA topic 1 question 83 discussion

Actual exam question from Palo Alto Networks's PCNSA

Question #: 83
Topic #: 1

The CFO found a malware infected USB drive in the parking lot, which when inserted infected their corporate laptop. The malware contacted a known command- and-control server, which caused the infected laptop to begin exfiltrating corporate data.
Which security profile feature could have been used to prevent the communication with the command-and-control server?

A. Create an anti-spyware profile and enable DNS Sinkhole feature.
B. Create an antivirus profile and enable its DNS Sinkhole feature.
C. Create a URL filtering profile and block the DNS Sinkhole URL category
D. Create a Data Filtering Profiles and enable its DNS Sinkhole feature.

Show Suggested Answer

Suggested Answer: A 🗳️

by chmani at Dec. 4, 2020, 7:47 p.m.

Comments

Submit Cancel

chmani

Highly Voted 3 years, 7 months ago

is this correct as i have seen in palo exam correct answer was "A" (create anti-spyware profile with dns sink hole?

upvoted 21 times

...

nabilzay

Highly Voted 3 years, 6 months ago

DNS sinkhole is configured under an anti-spyware profile, A should be the correct option

upvoted 9 times

...

Rivand

Most Recent 9 months, 2 weeks ago

Selected Answer: A

It's A

upvoted 1 times

...

Veasna_shadow

10 months, 2 weeks ago

Selected Answer: A

Which security profile feature could have been used to prevent the communications with the command and control server? Which security profile feature could have been used to prevent the communication with the command-and-control server? Create an anti-spyware profile and enable DNS Sinkhole feature.

upvoted 3 times

...

blu_gandalf

1 year, 1 month ago

just answered in Practice exam , its A

upvoted 1 times

...

ACPM

1 year, 5 months ago

Selected Answer: A

Answer is A: Anti-spyware

upvoted 1 times

...

LordScorpius

2 years, 3 months ago

Selected Answer: A

Palo connects "anti-spyware" directly with C&C in all their literature.

upvoted 3 times

...

error_909

2 years, 3 months ago

Selected Answer: A

the question is asking about how to prevent " to prevent the communication with the command-and-control server?" so the answer here is A. beside That, DNS Sinkhole is only configurable under Anti-spyware :)

upvoted 2 times

...