Free Preparation Discussions
MENU
Palo Alto Networks CloudSec-Pro Exam - Topic 4 Question 2 Discussion
Topic #: 4
A customer has a requirement to restrict any container from resolving the name www.evil-url.com.
How should the administrator configure Prisma Cloud Compute to satisfy this requirement?
To restrict any container from resolving the name www.evil-url.com, the administrator should set www.evil-url.com as a blocklisted DNS name in the default Container policy and set the effect to prevent. This configuration in Prisma Cloud, or similar CSPM tools, ensures that any attempt to resolve the specified blocklisted DNS name within any container will be prevented, thus enhancing security by proactively blocking potential communication with known malicious domains.
Reference to this feature can be found in the documentation of CSPM tools that offer runtime protection for containers. These tools allow administrators to define security policies that can include DNS-based controls to prevent containers from accessing known malicious or undesirable URLs, thereby preventing potential data exfiltration, malware communication, or other security threats
Edison
2 days agoGerman
7 days agoNadine
12 days agoSkye
17 days agoTiera
2 months agoCorinne
2 months agoArt
2 months agoParis
3 months agoWillodean
3 months agoGlendora
3 months agoLorrie
3 months agoStevie
3 months agoNan
3 months agoStephen
4 months agoLucina
4 months agoShaquana
4 months ago