An administrator would like to determine the default deny action for the application dns-over- https. Which action would yield the information?

beacon.paloaltonetworks.com is an external knowledge base for application information and threat intelligence, not for configuration-specific default actions on a local firewall.

Security policies define actions for traffic that matches their criteria, but they do not define an application's inherent 'default deny' action when no policy matches.

Antivirus profiles are designed for detecting and preventing malware, not for defining the default traffic handling of legitimate applications like dns-over-https.

The Objects > Applications section in the Palo Alto Networks firewall UI provides granular details for each application, including its inherent default action which determines how the firewall treats that application's traffic if no security policy explicitly permits or denies it.