Palo Alto Networks Exam PCNSA Topic 7 Question 48 Discussion

Actual exam question for Palo Alto Networks's PCNSA exam

Question #: 48
Topic #: 7

Which DNS Query action is recommended for traffic that is allowed by Security policy and matches Palo Alto Networks Content DNS Signatures?

Ablock

Bsinkhole

Calert

Dallow

Show Suggested Answer

Suggested Answer: C

by Justine at Jul 28, 2023, 08:14 PM

Limited Time Offer

25%

Off

Get Premium PCNSA Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Leontine

4 days ago

If the traffic is allowed by the security policy, then the recommended action should be D) allow. Blocking or sinkholing would be overkill in this case.

upvoted 0 times

...

Janine

10 days ago

I think the correct answer is D) allow. Palo Alto Networks Content DNS Signatures are used to identify and allow legitimate traffic, not block it.

upvoted 0 times

...

Catalina

17 days ago

I'm not sure, but I think allowing the DNS query might be the best option to ensure legitimate traffic is not blocked.

upvoted 0 times

...

Alexis

19 days ago

I agree with Belen, sinkholing the DNS query would help prevent any potential threats.

upvoted 0 times

...

Belen

21 days ago

I think the recommended action is to sinkhole the DNS query.

upvoted 0 times

...