PCNSA · Question #327
Which Security profile can be used to configure sinkhole IPs m the DNS Sinkhole settings?
The correct answer is B. Anti-Spyware. DNS Sinkholing is a feature configured within the Anti-Spyware security profile. When a client queries a malicious domain, the firewall intercepts the DNS response and replaces it with a sinkhole IP address (configured in the Anti-Spyware profile's DNS Sinkhole settings). This…
Question
Which Security profile can be used to configure sinkhole IPs m the DNS Sinkhole settings?
Options
- AVulnerability Protection
- BAnti-Spyware
- CAntivirus
- DURL Filtering
How the community answered
(48 responses)- A2% (1)
- B92% (44)
- C2% (1)
- D4% (2)
Explanation
DNS Sinkholing is a feature configured within the Anti-Spyware security profile. When a client queries a malicious domain, the firewall intercepts the DNS response and replaces it with a sinkhole IP address (configured in the Anti-Spyware profile's DNS Sinkhole settings). This redirects infected hosts attempting to reach C2 servers to a controlled IP, making infected devices visible and blockable. Antivirus, Vulnerability Protection, and URL Filtering profiles do not contain DNS Sinkhole configuration options.
Topics
Community Discussion
No community discussion yet for this question.