nerdexam
Palo_Alto_NetworksPalo_Alto_Networks

PCNSA · Question #297

PCNSA Question #297: Real Exam Question with Answer & Explanation

The correct answer is C: Anti-Spyware. DNS exceptions, specifically for the DNS Security service, are configured within the Anti-Spyware security profile.

Submitted by tom_us· Apr 18, 2026Securing Traffic

Question

DNS exceptions can be set under which Security profile?

Options

  • AData Filtering
  • BURL Filtering
  • CAnti-Spyware
  • DAntivirus

Explanation

DNS exceptions, specifically for the DNS Security service, are configured within the Anti-Spyware security profile.

Common mistakes.

  • A. Data Filtering profiles are used for preventing sensitive data exfiltration, not for managing DNS security exceptions.
  • B. URL Filtering profiles manage access to web categories and specific URLs, but they do not control DNS query exceptions for security services.
  • D. Antivirus profiles focus on detecting and blocking malware files, not on managing exceptions for DNS security detections.

Concept tested. DNS Security exceptions in Anti-Spyware profile

Reference. https://docs.paloaltonetworks.com/pan-os/10-2/pan-os-admin/threat-prevention/configure-anti-spyware-profiles

Topics

#DNS exceptions#Anti-Spyware#Security Profiles#Threat Prevention

Community Discussion

No community discussion yet for this question.

Full PCNSA PracticeBrowse All PCNSA Questions