Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25

- Free Preparation Discussions

Palo Alto Networks Exam PCNSA Topic 1 Question 83 Discussion

Actual exam question for Palo Alto Networks's PCNSA exam

Question #: 83
Topic #: 1

[All PCNSA Questions]

Which Security profile would you apply to identify infected hosts on the protected network using DNS traffic?

AURL traffic

Bvulnerability protection

Canti-spyware

Dantivirus

Show Suggested Answer

Suggested Answer: A

The show system fqdn command displays the FQDN objects configured on the firewall and their resolved IP addresses. This can help confirm if the FQDN objects are resolved correctly and if they match the expected traffic. A shadow rule is a rule that is never matched because a preceding rule covers the same traffic. If a shadow rule uses FQDN objects, it is possible that the FQDN objects are not resolved or have different IP addresses than the traffic, causing the rule to be ineffective.

by Moon at Feb 12, 2025, 05:24 AM

Limited Time Offer

25%

Off

Get Premium PCNSA Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Hana

2 months ago

A) URL traffic, because who doesn't love a good game of 'Guess the Malicious Website'?

upvoted 0 times

...

Ivette

2 months ago

D) antivirus, hands down. Gotta keep those viruses at bay and my network squeaky clean!

upvoted 0 times

Catherin

28 days ago

D) antivirus

upvoted 0 times

...

Jennie

1 months ago

C) anti-spyware

upvoted 0 times

...

Phil

1 months ago

B) vulnerability protection

upvoted 0 times

...

Adaline

2 months ago

A) URL traffic

upvoted 0 times

...

...

Kimberely

2 months ago

C) anti-spyware, all the way! Can't have those sneaky spies snooping around my network.

upvoted 0 times

...

Omega

2 months ago

Definitely going with B) vulnerability protection. Gotta stop those pesky vulnerabilities in their tracks!

upvoted 0 times

Lon

1 months ago

D) antivirus is always a good choice to have as an additional layer of protection.

upvoted 0 times

...

Bettyann

2 months ago

I think C) anti-spyware could also be helpful in detecting any suspicious activity.

upvoted 0 times

...

Johanna

2 months ago

I agree, B) vulnerability protection is crucial for identifying infected hosts.

upvoted 0 times

...

...

Jenifer

3 months ago

Hmm, using DNS traffic to identify infected hosts? Sounds like a job for the 'DNS Whisperer' security profile.

upvoted 0 times

Gilberto

1 months ago

D) antivirus

upvoted 0 times

...

Mitsue

1 months ago

C) anti-spyware

upvoted 0 times

...

Hoa

2 months ago

B) vulnerability protection

upvoted 0 times

...

Carma

2 months ago

A) URL traffic

upvoted 0 times

...

...

Andra

3 months ago

I'm not sure, but I think C) anti-spyware could also be a good option for this.

upvoted 0 times

...

Rosendo

4 months ago

I agree with Kara, antivirus makes sense for identifying infected hosts.

upvoted 0 times

...

Kara

4 months ago

I think the answer is D) antivirus.

upvoted 0 times

...