nerdexam
Palo_Alto_Networks

PCNSA · Question #75

In which profile should you configure the DNS Security feature?

The correct answer is A. Anti-Spyware Profile. DNS Security is configured within the Anti-Spyware Profile (Objects > Security Profiles > Anti-Spyware > DNS Policies tab). This placement is logical because DNS-based threats - such as command-and-control (C2) callbacks, DNS tunneling, and malware domains - are a form of…

Submitted by fernanda_arg· Apr 18, 2026Securing Traffic

Question

In which profile should you configure the DNS Security feature?

Options

  • AAnti-Spyware Profile
  • BZone Protection Profile
  • CAntivirus Profile
  • DURL Filtering Profile

How the community answered

(28 responses)
  • A
    93% (26)
  • B
    4% (1)
  • D
    4% (1)

Explanation

DNS Security is configured within the Anti-Spyware Profile (Objects > Security Profiles > Anti-Spyware > DNS Policies tab). This placement is logical because DNS-based threats - such as command-and-control (C2) callbacks, DNS tunneling, and malware domains - are a form of spyware and botnet behavior. Within the Anti-Spyware profile, administrators can specify DNS Security categories and define actions (allow, sinkhole, block) for each threat category detected by the cloud-based DNS Security service.

Topics

#DNS Security#Security Profiles#Anti-Spyware Profile#Threat Prevention

Community Discussion

No community discussion yet for this question.

Full PCNSA Practice