Which two statements are true for the DNS Security service introduced in PAN-OS version 10.0? (Choose two.)

The correct answer is B. It eliminates the need for dynamic DNS updates. D. It removes the 100K limit for DNS entries for the downloaded DNS updates.. https://docs.paloaltonetworks.com/pan-os/10-2/pan-os-admin/threat-prevention/dns- security/cloud-delivered-dns-signatures 1) Locally available, downloadable DNS signature sets (packaged with the antivirus and WildFire updates) come with a hard-coded capacity limitation of 100k si

Threat Prevention and DNS Security

Question

Options

AIt is automatically enabled and configured.
BIt eliminates the need for dynamic DNS updates.
CIt functions like PAN-DB and requires activation through the app portal.
DIt removes the 100K limit for DNS entries for the downloaded DNS updates.

How the community answered

(27 responses)

A
15% (4)
B
78% (21)
C
7% (2)

Explanation

https://docs.paloaltonetworks.com/pan-os/10-2/pan-os-admin/threat-prevention/dns- security/cloud-delivered-dns-signatures 1) Locally available, downloadable DNS signature sets (packaged with the antivirus and WildFire updates) come with a hard-coded capacity limitation of 100k signatures and do not include signatures generated through advanced analysis. 2) To better accommodate the influx of new DNS signatures being produced on a daily basis, the cloud-based signature database provides users with instant access to newly added DNS signatures without the need to download updates.

Topics

#DNS Security#PAN-OS 10.0#dynamic DNS#DNS entry limits

Community Discussion

No community discussion yet for this question.

Full NETSEC-ANALYST Practice