Palo Alto Networks PSE-Strata Exam - Topic 3 Question 96 Discussion

Actual exam question for Palo Alto Networks's PSE-Strata exam

Question #: 96
Topic #: 3

[All PSE-Strata Questions]

Which of the following statements is valid with regard to Domain Name System (DNS) sinkholing?

Ait requires the Vulnerability Protection profile to be enabled

BDNS sinkholing signatures are packaged and delivered through Vulnerability Protection updates

Cinfected hosts connecting to the Sinkhole Internet Protocol (IP) address can be identified in the traffic logs

DIt requires a Sinkhole license in order to activate

Show Suggested Answer

Suggested Answer: C

by Jolene at Sep 13, 2024, 03:23 AM

Limited Time Offer

25%

Off

Get Premium PSE-Strata Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Buck

3 months ago

I agree with C, it's super useful for tracking infected hosts.

upvoted 0 times

...

Colby

3 months ago

Wait, does it really need a Sinkhole license? That sounds weird.

upvoted 0 times

...

Moon

3 months ago

A seems off, you don't need that profile for sinkholing.

upvoted 0 times

...

Buck

4 months ago

I think B is correct too, they come with updates.

upvoted 0 times

...

Fannie

4 months ago

C is definitely true, I've seen it in action.

upvoted 0 times

...

Amie

4 months ago

I think option B sounds familiar since it talks about signatures and updates, but I’m not 100% confident about that.

upvoted 0 times

...

Slyvia

4 months ago

I feel like I’ve seen practice questions where they mentioned the Vulnerability Protection profile, but I can’t recall if it was necessary for sinkholing.

upvoted 0 times

...

Luis

4 months ago

I’m not entirely sure, but I think I read that sinkholing doesn’t need a specific license. Could it be option D?

upvoted 0 times

...

Tammara

5 months ago

I remember something about DNS sinkholing being related to traffic logs, so maybe option C is the right one?

upvoted 0 times

...

Cruz

5 months ago

Ah, I've got it! The correct answer is C. Infected hosts connecting to the Sinkhole IP address can be identified in the traffic logs.

upvoted 0 times

...

Scarlet

5 months ago

I'm a bit confused by the terminology here. I'll need to review my notes on DNS sinkholing before attempting this.

upvoted 0 times

...

Alishia

5 months ago

Okay, let's see. I remember learning about this in class. I think the key is to focus on the specific details of each statement.

upvoted 0 times

...

Dominga

5 months ago

Hmm, I'm not too sure about DNS sinkholing. I'll have to think this through carefully.

upvoted 0 times

...

Kristel

5 months ago

This question seems pretty straightforward. I think I can handle this one.

upvoted 0 times

...

Delpha

5 months ago

I think operating profit margin should be comparable since it reflects operating performance, right?

upvoted 0 times

...

Sherita

1 year ago

B seems like the odd one out here. The other options seem more directly related to DNS sinkholing. I'm going with C as the best answer.

upvoted 0 times

Keneth

1 year ago

I'm not sure, but I think D might also be a valid statement as it mentions needing a Sinkhole license to activate.

upvoted 0 times

...

Marguerita

1 year ago

I see your point, but I still think B is the most valid statement regarding DNS sinkholing.

upvoted 0 times

...

Ricarda

1 year ago

I disagree, I believe C is the best answer because infected hosts connecting to the Sinkhole IP address can be identified in the traffic logs.

upvoted 0 times

...

Brock

1 year ago

I think B is correct because DNS sinkholing signatures are delivered through Vulnerability Protection updates.

upvoted 0 times

...

Dong

1 year ago

Haha, I bet the person who wrote this question has a really punny sense of humor. 'Sinkhole' IP address, get it? *wink wink*

upvoted 0 times

Giovanna

1 year ago

Haha, yeah, that's a clever play on words with 'sinkhole' IP address!

upvoted 0 times

...

Truman

1 year ago

C) infected hosts connecting to the Sinkhole Internet Protocol (IP) address can be identified in the traffic logs

upvoted 0 times

...

Dalene

1 year ago

A) it requires the Vulnerability Protection profile to be enabled

upvoted 0 times

...

Sharan

1 year ago

D sounds plausible, but I'm not sure if a Sinkhole license is actually required. I'll have to double-check that.

upvoted 0 times

Theresia

1 year ago

C) infected hosts connecting to the Sinkhole Internet Protocol (IP) address can be identified in the traffic logs

upvoted 0 times

...

Clorinda

1 year ago

B) DNS sinkholing signatures are packaged and delivered through Vulnerability Protection updates

upvoted 0 times

...

Janella

1 year ago

A) it requires the Vulnerability Protection profile to be enabled

upvoted 0 times

...

Gianna

1 year ago

I think option C is the correct answer here. DNS sinkholing allows you to identify infected hosts connecting to the sinkhole IP address in the traffic logs.

upvoted 0 times