nerdexam
Palo_Alto_Networks

PCNSA · Question #327

Which Security profile can be used to configure sinkhole IPs m the DNS Sinkhole settings?

The correct answer is B. Anti-Spyware. DNS Sinkholing is a feature configured within the Anti-Spyware security profile. When a client queries a malicious domain, the firewall intercepts the DNS response and replaces it with a sinkhole IP address (configured in the Anti-Spyware profile's DNS Sinkhole settings). This…

Submitted by hans_de· Apr 18, 2026Configure

Question

Which Security profile can be used to configure sinkhole IPs m the DNS Sinkhole settings?

Options

  • AVulnerability Protection
  • BAnti-Spyware
  • CAntivirus
  • DURL Filtering

How the community answered

(48 responses)
  • A
    2% (1)
  • B
    92% (44)
  • C
    2% (1)
  • D
    4% (2)

Explanation

DNS Sinkholing is a feature configured within the Anti-Spyware security profile. When a client queries a malicious domain, the firewall intercepts the DNS response and replaces it with a sinkhole IP address (configured in the Anti-Spyware profile's DNS Sinkhole settings). This redirects infected hosts attempting to reach C2 servers to a controlled IP, making infected devices visible and blockable. Antivirus, Vulnerability Protection, and URL Filtering profiles do not contain DNS Sinkhole configuration options.

Topics

#Security Profiles#DNS Sinkhole#Anti-Spyware

Community Discussion

No community discussion yet for this question.

Full PCNSA Practice