What has happened when the traffic log shows an internal host attempting to open a session to a properly configured sinkhole address?

The correct answer is B. The internal host attempted to use DNS to resolve a known malicious domain into an IP address. com/en_US/assets/pdf/framemaker/pan-os/NewFeaturesGuide.pdf page 14

Module 1: Introduction to Python and Computer Programming

Question

Options

AThe internal host is trying to resolve a DNS query by connecting to a rogue DNS server.
BThe internal host attempted to use DNS to resolve a known malicious domain into an IP address.
CA rogue DNS server is now using the sinkhole address to direct traffic to a known malicious
DA malicious domain is trying to contact an internal DNS server.

How the community answered

(24 responses)

A
13% (3)
B
75% (18)
C
4% (1)
D
8% (2)

Explanation

com/en_US/assets/pdf/framemaker/pan-os/NewFeaturesGuide.pdf page 14

Topics

#DNS sinkhole#malicious domain#DNS security#threat intelligence

Community Discussion

No community discussion yet for this question.

Full PCNSE6 Practice