nerdexam
Palo_Alto_Networks

ACE · Question #89

To allow the PAN device to resolve internal and external DNS host names for reporting and for security policies, an administrator can do the following:

The correct answer is A. Create a DNS Proxy Object with a default DNS Server for external resolution and a DNS server for internal domain. Then, in the device settings, point to this proxy object for DNS resolution. See the full explanation below for the reasoning.

Question

To allow the PAN device to resolve internal and external DNS host names for reporting and for security policies, an administrator can do the following:

Options

  • ACreate a DNS Proxy Object with a default DNS Server for external resolution and a DNS server for internal domain. Then, in the device settings, point to this proxy object for DNS resolution.
  • BIn the device settings define internal hosts via a static list.
  • CIn the device settings set the Primary DNS server to an external server and the secondary to an internal server.
  • DCreate a DNS Proxy Object with a default DNS Server for external resolution and a DNS server for internal domain. Then, in the device settings, select the proxy object as the Primary DNS and create a custom security rule which references that object for

How the community answered

(53 responses)
  • A
    83% (44)
  • B
    2% (1)
  • C
    6% (3)
  • D
    9% (5)

Community Discussion

No community discussion yet for this question.

Full ACE Practice