Palo_Alto_Networks
NETSEC-PRO · Question #8
NETSEC-PRO Question #8: Real Exam Question with Answer & Explanation
Sign in or unlock NETSEC-PRO to reveal the answer and full explanation for question #8. The question stem and answer options stay visible for context.
Question
A network administrator obtains Palo Alto Networks Advanced Threat Prevention and Advanced DNS Security subscriptions for edge NGFWs and is setting up security profiles. Which step should be included in the initial configuration of the Advanced DNS Security service?
Options
- ACreate a decryption policy rule to decrypt DNS-over-TLS / port 853 traffic.
- BCreate overrides for all company owned FQDNs.
- CConfigure DNS Security signature policy settings to sinkhole malicious DNS queries.
- DEnable Advanced Threat Prevention with default settings and only focus on high-risk traffic.
Unlock NETSEC-PRO to see the answer
You've previewed enough free NETSEC-PRO questions. Unlock NETSEC-PRO for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.