nerdexam
Palo_Alto_Networks

PCNSA · Question #297

DNS exceptions can be set under which Security profile?

The correct answer is C. Anti-Spyware. DNS exceptions, specifically for the DNS Security service, are configured within the Anti-Spyware security profile.

Submitted by tom_us· Apr 18, 2026Securing Traffic

Question

DNS exceptions can be set under which Security profile?

Options

  • AData Filtering
  • BURL Filtering
  • CAnti-Spyware
  • DAntivirus

How the community answered

(22 responses)
  • A
    9% (2)
  • C
    86% (19)
  • D
    5% (1)

Why each option

DNS exceptions, specifically for the DNS Security service, are configured within the Anti-Spyware security profile.

AData Filtering

Data Filtering profiles are used for preventing sensitive data exfiltration, not for managing DNS security exceptions.

BURL Filtering

URL Filtering profiles manage access to web categories and specific URLs, but they do not control DNS query exceptions for security services.

CAnti-SpywareCorrect

DNS Security, which protects against malicious DNS activity, is integrated and configured within the Anti-Spyware profile; therefore, any exceptions to DNS Security detections, such as allowing specific domains, are managed directly within this profile.

DAntivirus

Antivirus profiles focus on detecting and blocking malware files, not on managing exceptions for DNS security detections.

Concept tested: DNS Security exceptions in Anti-Spyware profile

Source: https://docs.paloaltonetworks.com/pan-os/10-2/pan-os-admin/threat-prevention/configure-anti-spyware-profiles

Topics

#DNS exceptions#Anti-Spyware#Security Profiles#Threat Prevention

Community Discussion

No community discussion yet for this question.

Full PCNSA Practice