PCNSE · Question #858
A customer wants to enhance the protection provided by their Palo Alto Networks NGFW deployment to cover public-facing company-owned domains from misconfigurations that point records to third-party…
The correct answer is C. Verify the NGFWs have the Advanced DNS Security and Advanced URL Filtering licenses D. Create or update an Anti-Spyware profile, go to the DNS Policies / DNS Zone Misconfiguration. To protect against DNS misconfigurations, Advanced DNS Security and Advanced URL Filtering licenses (Option C) enable DNS sinkholing and domain monitoring. In an Anti-Spyware profile (Option D), the DNS Policies section allows adding specific domains to detect and block…
Question
A customer wants to enhance the protection provided by their Palo Alto Networks NGFW deployment to cover public-facing company-owned domains from misconfigurations that point records to third-party sources. Which two actions should the network administrator perform to achieve this goal? (Choose two)
Options
- AVerify the NGFWs have the Advanced DNS Security and Advanced Threat Prevention licenses
- BCreate or update a Vulnerability Protection profile to the DNS Policies / DNS Zone
- CVerify the NGFWs have the Advanced DNS Security and Advanced URL Filtering licenses
- DCreate or update an Anti-Spyware profile, go to the DNS Policies / DNS Zone Misconfiguration
How the community answered
(32 responses)- A9% (3)
- B19% (6)
- C72% (23)
Explanation
To protect against DNS misconfigurations, Advanced DNS Security and Advanced URL Filtering licenses (Option C) enable DNS sinkholing and domain monitoring. In an Anti-Spyware profile (Option D), the DNS Policies section allows adding specific domains to detect and block misconfigured records pointing to third-party sources.
Topics
Community Discussion
No community discussion yet for this question.