Palo Alto Networks Exam PSE-Platform Topic 1 Question 37 Discussion

Actual exam question for Palo Alto Networks's PSE-Platform exam

Question #: 37
Topic #: 1

[All PSE-Platform Questions]

What two advantages of the DNS Sinkholing feature? (Choose two)

AIt can be deployed independently of an Anti-Spyware Profile.

BIt is monitoring DNS requests passively for malware domains.

CIt can work upstream from the internal DNS server.

DIt is forging DNS replies to known malicious domains.

Show Suggested Answer

Suggested Answer: C

by Catalina at Jan 08, 2023, 12:23 AM

Limited Time Offer

25%

Off

Get Premium PSE-Platform Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Quinn

2 months ago

Dude, sinkholing is like the superpower of DNS. It can see all the bad guys coming and just be like 'nope, not today!'

upvoted 0 times

Dylan

29 days ago

B) It is monitoring DNS requests passively for malware domains.

upvoted 0 times

...

Tarra

1 months ago

A) It can be deployed independently of an Anti-Spyware Profile.

upvoted 0 times

...

Alison

2 months ago

Wow, this is a tough one. I'm just hoping I don't accidentally sinkhole my own network. That would be a real 'hole' in my IT skills!

upvoted 0 times

Major

24 days ago

Haha, sinking your own network would definitely be a 'hole' lot of trouble!

upvoted 0 times

...

Major

1 months ago

B) It is monitoring DNS requests passively for malware domains.

upvoted 0 times

...

Major

1 months ago

A) It can be deployed independently of an Anti-Spyware Profile.

upvoted 0 times

...

Jules

3 months ago

A and C, baby! Sinkholing is all about independence and getting in front of that internal DNS server. Who needs an Anti-Spyware Profile?

upvoted 0 times

Lettie

2 months ago

C) It can work upstream from the internal DNS server.

upvoted 0 times

...

Lyla

2 months ago

A) It can be deployed independently of an Anti-Spyware Profile.

upvoted 0 times

...

Caitlin

3 months ago

B and D for sure! Monitoring DNS requests passively and forging replies to known bad domains - that's the power of sinkholing.

upvoted 0 times

Mee

28 days ago

Overall, it's a very effective feature for blocking malicious traffic.

upvoted 0 times

...

Laurel

29 days ago

And being able to forge DNS replies to known malicious domains adds an extra layer of security.

upvoted 0 times

...

Erasmo

1 months ago

It's great that it can monitor DNS requests passively for malware domains.

upvoted 0 times

...

Deonna

1 months ago

I agree, B and D are definitely powerful advantages of DNS Sinkholing.

upvoted 0 times

...

Whitney

1 months ago

Forging DNS replies to known malicious domains adds an extra layer of security.

upvoted 0 times

...

Malissa

2 months ago

Monitoring DNS requests passively is a key feature for detecting malware domains.

upvoted 0 times

...

Catherin

2 months ago

It's great that it can work independently of an Anti-Spyware Profile.

upvoted 0 times

...

Devorah

3 months ago

I agree, those are definitely powerful advantages of DNS Sinkholing.

upvoted 0 times

...

Annett

3 months ago

But A and C make more sense because they are independent and can work upstream.

upvoted 0 times

...

Carole

3 months ago

C and D seem like the right options to me. Sinkholing can definitely work upstream and forge replies to malicious domains.

upvoted 0 times

Jolanda

2 months ago

Absolutely, having these advantages can help enhance security measures in place.

upvoted 0 times

...

Brett

3 months ago

It's important to have these features to protect against malware domains.

upvoted 0 times

...

Jeniffer

3 months ago

Yes, DNS Sinkholing can definitely work upstream and forge replies to known malicious domains.

upvoted 0 times

...

Wade

3 months ago

I agree, C and D are the correct options for the advantages of DNS Sinkholing.

upvoted 0 times

...

Bea

3 months ago

I disagree, I believe it's B and D.

upvoted 0 times

...

Annett

4 months ago

I think the advantages are A and C.

upvoted 0 times

...