Which three activities can the botnet report track? (Choose three.)

The correct answer is A. Accessing domains registered in the last 30 days B. Visiting a malicious URL F. Using dynamic DNS domain providers. To evaluate botnet activity and infected hosts, the firewall correlates user and network activity data in Threat, URL, and Data Filtering logs with the list of malware URLs in PAN-DB, known dynamic DNS domain providers, and domains registered within the last 30 days. https://docs

Threat Prevention and WildFire

Question

Options

AAccessing domains registered in the last 30 days
BVisiting a malicious URL
CLaunching a P2P application
DDetecting malware within a one-hour period
EInitiating API calls to other applications
FUsing dynamic DNS domain providers

How the community answered

(20 responses)

A
80% (16)
C
5% (1)
D
15% (3)

Explanation

To evaluate botnet activity and infected hosts, the firewall correlates user and network activity data in Threat, URL, and Data Filtering logs with the list of malware URLs in PAN-DB, known dynamic DNS domain providers, and domains registered within the last 30 days. https://docs.paloaltonetworks.com/pan-os/9-1/pan-os-admin/monitoring/view-and-manage- reports/generate-botnet-reports

Topics

#botnet report#malicious URL#dynamic DNS#threat tracking

Community Discussion

No community discussion yet for this question.

Full PSE-STRATA Practice