Palo Alto Networks XDR-Engineer Exam - Topic 1 Question 15 Discussion

Actual exam question for Palo Alto Networks's XDR-Engineer exam

Question #: 15
Topic #: 1

[Planning and Installation]

When using Kerberos as the authentication method for Pathfinder, which two settings must be validated on the DNS server? (Choose two.)

ADNS forwarders

BReverse DNS zone

CReverse DNS records

DAD DS-integrated zones

Show Suggested Answer

Suggested Answer: B, C

by Fairy at Apr 04, 2026, 06:15 PM

Limited Time Offer

25%

Off

Contribute your Thoughts:

Submit Cancel

21 hours ago

I’m a bit confused; I thought DNS forwarders were necessary for Kerberos, but now I’m not so sure.

upvoted 0 times

...

6 days ago

I practiced a similar question, and I believe both reverse DNS zone and records are crucial for Kerberos to work properly.

upvoted 0 times

...

11 days ago

I remember something about AD DS-integrated zones being important, but I can't recall if it's one of the answers here.

upvoted 0 times

...

16 days ago

I think we need to check the reverse DNS records, but I'm not entirely sure about the forwarders.

upvoted 0 times

...