Palo Alto Networks Exam PSE-Platform Topic 1 Question 55 Discussion

Actual exam question for Palo Alto Networks's PSE Platform Exam exam

Question #: 55
Topic #: 1

Which configuration creates the most comprehensive ''best-practice'' Anti Spyware profile to prevent command and Control traffic?

AClone the Strict Anti-Spyware Profile, enable DNS Sinkholing and Passive DNS Monitoring, and deploy this customized clone

BClone the Default Anti-Spyware Profile and enable DNS Sinkholing and Passive DNS Monitoring, and deploy this customized clone

CEdit and deploy the Default Anti-Spyware Profile (DNS Sinkholing and Passive DNS Monitoring is already enabled)

DEdit and deploy the Strict Anti-Spyware Profile Profile (DNS Sinkholing and Passive DNS Monitoring is already enabled)

Show Suggested Answer

Suggested Answer: A

by Sherita at Mar 05, 2024, 09:48 AM

Limited Time Offer

25%

Off

Get Premium PSE-Platform Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Mattie

11 days ago

Haha, yeah, I can just imagine someone trying to use the Strict profile and then complaining that their machine is running like a snail. Better to start with the Default profile and add the good stuff on top. Although, I do wonder if there are any hidden gotchas with that approach that we're not considering.

upvoted 0 times

...

Evangelina

12 days ago

You know, I was initially drawn to option D, since the Strict profile already has those features enabled. But then I realized, if we're going for a 'best-practice' approach, cloning and customizing the profile might be better. That way, we can tailor it to our specific needs, rather than just blindly using the pre-configured one.

upvoted 0 times

...

Lennie

13 days ago

I agree with you on that. Option B seems like the sweet spot - we get the core anti-spyware protections, plus the added benefits of DNS Sinkholing and Passive DNS Monitoring. That should cover most of the common command and control traffic scenarios without being too heavy-handed.

upvoted 0 times

...

Emile

14 days ago

Hmm, this question seems a bit tricky. I'm not sure if cloning the Strict Anti-Spyware Profile is the best approach, as that might be overkill for some use cases. I'm leaning more towards option B, where we clone the Default profile and enable the additional features. That way, we get the best-practice settings without going overboard.

upvoted 0 times

...