nerdexam
Palo_Alto_Networks

NETSEC-ANALYST · Question #435

Which CLI command will help confirm if FQDN objects are resolved in the event there is a shadow rule?

The correct answer is D. >request system fqdn show. The CLI command below can then be used to view the list of FQDN objects and the IP addresses associated with that name. PAN-OS 8.1 and below: > request system fqdn show PAN-OS 9.1 and above: > show dns-proxy fqdn all

Security Policy Management

Question

Which CLI command will help confirm if FQDN objects are resolved in the event there is a shadow rule?

Options

  • A
    show system fqdn
  • B
    request fqdn show system
  • C
    request show system fqdn
  • D
    request system fqdn show

How the community answered

(37 responses)
  • A
    11% (4)
  • B
    3% (1)
  • C
    3% (1)
  • D
    84% (31)

Explanation

The CLI command below can then be used to view the list of FQDN objects and the IP addresses associated with that name. PAN-OS 8.1 and below: > request system fqdn show PAN-OS 9.1 and above: > show dns-proxy fqdn all

Topics

#FQDN objects#CLI commands#shadow rules#DNS resolution

Community Discussion

No community discussion yet for this question.

Full NETSEC-ANALYST Practice