PCNSA · Question #233
What are three Palo Alto Networks best practices when implementing the DNS Security Service? (Choose three.)
The correct answer is A. Implement a threat intel program. B. Configure a URL Filtering profile. D. Rely on a DNS resolver. Three best practices for implementing Palo Alto Networks DNS Security Service include adopting a threat intelligence program, configuring a complementary URL Filtering profile, and ensuring proper reliance on a DNS resolver.
Question
What are three Palo Alto Networks best practices when implementing the DNS Security Service? (Choose three.)
Options
- AImplement a threat intel program.
- BConfigure a URL Filtering profile.
- CTrain your staff to be security aware.
- DRely on a DNS resolver.
- EPlan for mobile-employee risk
How the community answered
(36 responses)- A75% (27)
- C8% (3)
- E17% (6)
Why each option
Three best practices for implementing Palo Alto Networks DNS Security Service include adopting a threat intelligence program, configuring a complementary URL Filtering profile, and ensuring proper reliance on a DNS resolver.
Implementing a threat intelligence program enhances the effectiveness of DNS Security, as the service heavily relies on continuously updated threat intelligence from Palo Alto Networks to identify malicious domains.
Configuring a URL Filtering profile complements DNS Security by providing granular control over web access and identifying malicious URLs in HTTP/S traffic, working together to provide comprehensive web protection.
Training staff to be security aware is a general cybersecurity best practice for an organization, but it is not a direct technical implementation best practice for configuring the DNS Security Service itself.
DNS Security functions by inspecting DNS queries before they reach an upstream resolver; therefore, proper configuration and reliance on a robust DNS resolver are fundamental for the service to operate correctly.
Planning for mobile-employee risk is a broader security strategy involving solutions like GlobalProtect, not a specific implementation best practice for the firewall's DNS Security Service.
Concept tested: DNS Security Service best practices
Source: https://docs.paloaltonetworks.com/pan-os/10-2/pan-os-admin/dns-security/configure-dns-security
Topics
Community Discussion
No community discussion yet for this question.