Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions

Palo Alto Networks Exam PCNSA Topic 7 Question 48 Discussion

Actual exam question for Palo Alto Networks's PCNSA exam
Question #: 48
Topic #: 7
[All PCNSA Questions]

Which DNS Query action is recommended for traffic that is allowed by Security policy and matches Palo Alto Networks Content DNS Signatures?

Show Suggested Answer Hide Answer
Suggested Answer: C

Contribute your Thoughts:

Cheryl
1 months ago
You know, if the question was about how to handle traffic that's not allowed by the security policy, I'd say the answer is 'run and hide.' But since it's allowed traffic, D) allow is the way to go.
upvoted 0 times
Lorrie
15 days ago
Definitely, allowing the traffic is the recommended action.
upvoted 0 times
...
Lemuel
18 days ago
It's important to follow the security policy and allow the traffic.
upvoted 0 times
...
Refugia
27 days ago
I agree, allowing the traffic is the best option.
upvoted 0 times
...
Hester
28 days ago
D) allow is the way to go.
upvoted 0 times
...
...
Britt
2 months ago
D) allow is the way to go. I mean, who wants to be the one to explain to the boss why we're blocking traffic that's supposed to be allowed? That's a career-limiting move, my friend.
upvoted 0 times
...
Magda
2 months ago
I'm gonna go with D) allow. Blocking or alerting on traffic that's already approved by the policy doesn't make much sense. Gotta keep things simple, right?
upvoted 0 times
Ruby
8 days ago
I always go with D) allow for approved traffic. It's the most straightforward choice.
upvoted 0 times
...
Werner
10 days ago
Yeah, blocking or alerting would just create unnecessary noise. D) allow is the best option.
upvoted 0 times
...
Mozelle
13 days ago
I agree, D) allow is the way to go. No need to complicate things.
upvoted 0 times
...
...
Leontine
2 months ago
If the traffic is allowed by the security policy, then the recommended action should be D) allow. Blocking or sinkholing would be overkill in this case.
upvoted 0 times
Elin
7 days ago
Yes, that would be the most appropriate action in this scenario.
upvoted 0 times
...
Herschel
8 days ago
So, we should go with option D) allow then.
upvoted 0 times
...
Juan
9 days ago
Agreed, blocking or sinkholing would be too extreme.
upvoted 0 times
...
Nu
10 days ago
I think the recommended action would be D) allow.
upvoted 0 times
...
Matthew
11 days ago
Yes, that's the best course of action in this scenario.
upvoted 0 times
...
Deane
13 days ago
So, we should go with option D) allow then.
upvoted 0 times
...
Geraldo
26 days ago
Agreed, blocking or sinkholing would be too harsh for allowed traffic.
upvoted 0 times
...
Long
28 days ago
I think the recommended action would be D) allow.
upvoted 0 times
...
...
Janine
2 months ago
I think the correct answer is D) allow. Palo Alto Networks Content DNS Signatures are used to identify and allow legitimate traffic, not block it.
upvoted 0 times
Gerald
2 months ago
Yes, allowing traffic that matches Palo Alto Networks Content DNS Signatures is the recommended action.
upvoted 0 times
...
Latrice
2 months ago
I agree, the correct answer is D) allow.
upvoted 0 times
...
...
Catalina
3 months ago
I'm not sure, but I think allowing the DNS query might be the best option to ensure legitimate traffic is not blocked.
upvoted 0 times
...
Alexis
3 months ago
I agree with Belen, sinkholing the DNS query would help prevent any potential threats.
upvoted 0 times
...
Belen
3 months ago
I think the recommended action is to sinkhole the DNS query.
upvoted 0 times
...

Save Cancel