Exam PCNSE topic 1 question 385 discussion

100% D A. Navigate to Objects > Security Profiles > Anti-Spyware Select related profile Select the signature exceptions tab and then click show all signatures Search related threat ID and click enable Change the default action Commit there is no option to change default action only enable B. Navigate to Objects > Security Profiles > Anti-Spyware Select related profile Select the Exceptions tab and then click show all signatures Search related threat ID and click enable Commit there is no any tab for Exception only signature Exception or DNS exception C. Navigate to Objects > Security Profiles > Vulnerability Protection Select related profile Select the Exceptions tab and then click show all signatures Search related threat ID and click enable Commit for sure not vulnerability D. Navigate to Objects > Security Profiles > Anti-Spyware Select related profile Select DNS exceptions tabs Search related threat ID and click enable Commit

i think A

D is correct

DNS Exceptions for sure !

spyware category: dns-c2 - Option D

D: Select Objects>Security Profiles>Anti-Spyware. Add or modify the Anti-Spyware profile from which you want to exclude the threat signature, and select DNS Exceptions. Search for the DNS Threat ID for the DNS signature that you want to exclude from enforcement and select the box of the applicable signature. . . https://docs.paloaltonetworks.com/pan-os/10-2/pan-os-admin/threat-prevention/create-threat-exceptions

100 % d checked on the Panorama

https://docs.paloaltonetworks.com/pan-os/10-2/pan-os-admin/threat-prevention/create-threat-exceptions

agree D Step 3 here - DNS signatures are handled differently https://docs.paloaltonetworks.com/pan-os/9-1/pan-os-admin/threat-prevention/create-threat-exceptions

Correct answer is A, enable a specific signature, change the default action from reset both to allow and commit. https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClcrCAC

B - Easy: Just see GUI capture https://docs.paloaltonetworks.com/content/dam/techdocs/en_US/dita/_graphics/9-1/threat-prevention/threat-exception-antispyware.png/jcr:content/renditions/original

https://docs.paloaltonetworks.com/pan-os/9-1/pan-os-admin/threat-prevention/create-threat-exceptions