What should an engineer consider when setting up the DNS proxy for web proxy?

The correct answer is A. A secondary DNS server in the DNS proxy is optional, and configuration commit to the firewall will. When configuring the DNS proxy for web proxy on a Palo Alto Networks firewall, the secondary DNS server is optional. The firewall can be configured with just one DNS server, and the configuration commit will still succeed without a secondary server. However, if redundancy is…

Submitted by andres_qro· Apr 18, 2026Deploy and Configure

Question

Options

AA secondary DNS server in the DNS proxy is optional, and configuration commit to the firewall will
BA maximum of two FQDNs can be mapped to an IP address in the static entries for DNS proxy.
CDNS timeout for web proxy can be configured manually, and it should be set to the highest value
DAdjust the UDP queries for the DNS proxy to allow both DNS servers to be tried within 20

How the community answered

(67 responses)

A
94% (63)
B
3% (2)
C
1% (1)
D
1% (1)

Explanation

When configuring the DNS proxy for web proxy on a Palo Alto Networks firewall, the secondary DNS server is optional. The firewall can be configured with just one DNS server, and the configuration commit will still succeed without a secondary server. However, if redundancy is desired, a secondary DNS server can be configured for failover purposes.

Topics

#DNS Proxy#Web Proxy#Firewall Configuration#Network Services

Community Discussion

No community discussion yet for this question.

Full PCNSE Practice