U.S. Independence Day Deal! Unlock 25% OFF Today – Limited-Time Offer - Ends In 00:00:00 Coupon code: SAVE25

- Free Preparation Discussions

Palo Alto Networks PSE-Platform Exam - Topic 3 Question 88 Discussion

Actual exam question for Palo Alto Networks's PSE-Platform exam

Question #: 88
Topic #: 3

[All PSE-Platform Questions]

What two advantages of the DNS Sinkholing feature? (Choose two)

AIt can be deployed independently of an Anti-Spyware Profile.

BIt is monitoring DNS requests passively for malware domains.

CIt can work upstream from the internal DNS server.

DIt is forging DNS replies to known malicious domains.

Show Suggested Answer

Suggested Answer: C, D

https://www.paloaltonetworks.com/documentation/71/pan-os/pan-os/threat-prevention/dns-sinkholing

by Corrinne at Aug 04, 2025, 11:29 AM

Limited Time Offer

25%

Off

Get Premium PSE-Platform Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Fletcher

5 months ago

Deploying independently of Anti-Spyware is a game changer!

upvoted 0 times

...

Alex

6 months ago

Wait, it forges DNS replies? That sounds risky!

upvoted 0 times

...

Annamae

6 months ago

I think monitoring DNS requests is super important too.

upvoted 0 times

...

Derrick

6 months ago

Totally agree, that's a big plus!

upvoted 0 times

...

Tracie

6 months ago

It can work upstream from the internal DNS server.

upvoted 0 times

...

Arlette

7 months ago

I thought we discussed that it can be deployed independently of an Anti-Spyware Profile, so maybe option A is one of the answers?

upvoted 0 times

...

Lawrence

7 months ago

I feel like option D about forging DNS replies could be an advantage too, but I can't recall if it's specifically mentioned in our practice questions.

upvoted 0 times

...

Valentin

7 months ago

I remember something about it monitoring DNS requests for malware, so maybe option B is correct?

upvoted 0 times

...

Fidelia

8 months ago

I think one advantage is that it can work upstream from the internal DNS server, but I'm not entirely sure.

upvoted 0 times

...

Hassie

8 months ago

I've got this! The first advantage is that it can be deployed independently of an Anti-Spyware Profile, and the second is that it can work upstream from the internal DNS server.

upvoted 0 times

...

Elsa

8 months ago

Hmm, I'm not entirely sure about that. I think the forging of DNS replies to malicious domains might be one of the advantages, but I'm not confident.

upvoted 0 times

...

Annice

8 months ago

I remember learning about DNS Sinkholing in class. I think the passive monitoring and the ability to work upstream are the two advantages they're looking for.

upvoted 0 times

...

Emilio

8 months ago

Okay, let's think this through. I'm pretty sure the key is to identify the two main advantages of this feature.

upvoted 0 times

...

Jacki

9 months ago

This question seems straightforward, but I want to make sure I understand the DNS Sinkholing feature correctly before answering.

upvoted 0 times

...

Delsie

9 months ago

Ooh, 'work upstream'? Sounds like it can do some serious network magic. I'll go with B and C.

upvoted 0 times

...

Merri

9 months ago

I agree with Dong, B and D are the correct advantages.

upvoted 0 times

...

Valentin

9 months ago

Hah, 'forging DNS replies'? That's got to be the most devious sounding option. I'm going with B and D!

upvoted 0 times

Janine

5 months ago

True, but B and D have that edge for active protection!

upvoted 0 times

...

Daniela

6 months ago

I see what you mean! B and D do sound effective.

upvoted 0 times

...

Nguyet

7 months ago

I think A and C could be useful too, though.

upvoted 0 times

...

Shalon

7 months ago

Definitely! Monitoring and forging replies is a solid combo.

upvoted 0 times

...

...

Alisha

10 months ago

But A makes sense because it can be independent of Anti-Spyware.

upvoted 0 times

...

Silva

10 months ago

Definitely B and D. Sinkholing is all about intercepting and redirecting suspicious DNS traffic.

upvoted 0 times

Darrin

9 months ago

B) It is monitoring DNS requests passively for malware domains.

upvoted 0 times

...

...

Dong

10 months ago

I disagree, I believe it's B and D.

upvoted 0 times

...

Alisha

11 months ago

I think the advantages are A and C.

upvoted 0 times

...

Arlene

11 months ago

I think the correct answers are B and D. Sinkholing can monitor DNS requests and forge replies to malicious domains.

upvoted 0 times

Renato

9 months ago

That's right, B and D are the two advantages of DNS Sinkholing. It passively monitors DNS requests and can forge replies to known malicious domains.

upvoted 0 times

...

Rosamond

9 months ago

Yes, B and D are the advantages because it monitors DNS requests and can forge replies to malicious domains.

upvoted 0 times

...

Carlton

9 months ago

I agree, B and D are the correct answers for the advantages of DNS Sinkholing.

upvoted 0 times

...

...