Palo Alto Networks Exam PSE-Strata Topic 3 Question 96 Discussion

Actual exam question for Palo Alto Networks's PSE-Strata exam

Question #: 96
Topic #: 3

[All PSE-Strata Questions]

Which of the following statements is valid with regard to Domain Name System (DNS) sinkholing?

Ait requires the Vulnerability Protection profile to be enabled

BDNS sinkholing signatures are packaged and delivered through Vulnerability Protection updates

Cinfected hosts connecting to the Sinkhole Internet Protocol (IP) address can be identified in the traffic logs

DIt requires a Sinkhole license in order to activate

Show Suggested Answer

Suggested Answer: C

by Jolene at Sep 13, 2024, 03:23 AM

Limited Time Offer

25%

Off

Get Premium PSE-Strata Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Sherita

8 months ago

B seems like the odd one out here. The other options seem more directly related to DNS sinkholing. I'm going with C as the best answer.

upvoted 0 times

Keneth

7 months ago

I'm not sure, but I think D might also be a valid statement as it mentions needing a Sinkhole license to activate.

upvoted 0 times

...

Marguerita

7 months ago

I see your point, but I still think B is the most valid statement regarding DNS sinkholing.

upvoted 0 times

...

Ricarda

7 months ago

I disagree, I believe C is the best answer because infected hosts connecting to the Sinkhole IP address can be identified in the traffic logs.

upvoted 0 times

...

Brock

8 months ago

I think B is correct because DNS sinkholing signatures are delivered through Vulnerability Protection updates.

upvoted 0 times

...

Dong

8 months ago

Haha, I bet the person who wrote this question has a really punny sense of humor. 'Sinkhole' IP address, get it? *wink wink*

upvoted 0 times

Giovanna

8 months ago

Haha, yeah, that's a clever play on words with 'sinkhole' IP address!

upvoted 0 times

...

Truman

8 months ago

C) infected hosts connecting to the Sinkhole Internet Protocol (IP) address can be identified in the traffic logs

upvoted 0 times

...

Dalene

8 months ago

A) it requires the Vulnerability Protection profile to be enabled

upvoted 0 times

...

Sharan

9 months ago

D sounds plausible, but I'm not sure if a Sinkhole license is actually required. I'll have to double-check that.

upvoted 0 times

Theresia

8 months ago

C) infected hosts connecting to the Sinkhole Internet Protocol (IP) address can be identified in the traffic logs

upvoted 0 times

...

Clorinda

8 months ago

B) DNS sinkholing signatures are packaged and delivered through Vulnerability Protection updates

upvoted 0 times

...

Janella

8 months ago

A) it requires the Vulnerability Protection profile to be enabled

upvoted 0 times

...

Gianna

9 months ago

I think option C is the correct answer here. DNS sinkholing allows you to identify infected hosts connecting to the sinkhole IP address in the traffic logs.

upvoted 0 times

Kenneth

8 months ago

I think both options C and D are necessary for effective DNS sinkholing.

upvoted 0 times

...

Joseph

8 months ago

That's true, option D is important for activating DNS sinkholing.

upvoted 0 times

...

Olga

8 months ago

I believe option A is necessary as well. The Vulnerability Protection profile needs to be enabled for DNS sinkholing.

upvoted 0 times

...

Laila

8 months ago

I think option B might also be valid. DNS sinkholing signatures are delivered through Vulnerability Protection updates.

upvoted 0 times

...

Janessa

9 months ago

I agree, option C is correct. It helps identify infected hosts in the traffic logs.

upvoted 0 times

...

Adolph

9 months ago

But I think option D is also valid. It requires a Sinkhole license to activate.

upvoted 0 times

...

Eric

9 months ago

I agree, option C is the correct answer. It allows you to identify infected hosts in the traffic logs.

upvoted 0 times

...

Dwight

9 months ago

I'm not sure, but I think it might also require a Sinkhole license to activate, so maybe the answer is D).

upvoted 0 times

...

Lorean

9 months ago

I agree with Evangelina, because DNS sinkholing signatures are indeed delivered through Vulnerability Protection updates.

upvoted 0 times

...

Evangelina

9 months ago

I think the answer is B) DNS sinkholing signatures are packaged and delivered through Vulnerability Protection updates.

upvoted 0 times

...