QUESTION: 81

Which two statements are true for the DNS Security service introduced in PAN-OS version 9.0? (Choose two.)

It is automatically enabled and configured.
It eliminates the need for dynamic DNS updates.
It functions like PAN-DB and requires activation through the app portal.
It removes the 100K limit for DNS entries for the downloaded DNS updates.

Answer(s): A,B

Reveal Solution Next Question

QUESTION: 82

Which two features can be used to tag a username so that it is included in a dynamic user group? (Choose two.)

GlobalProtect agent
XML API
User-ID Windows-based agent
log forwarding auto-tagging

Answer(s): B,D

Reveal Solution Next Question

The CFO found a malware infected USB drive in the parking lot, which when inserted infected their corporate laptop. The malware contacted a known command- and-control server, which caused the infected laptop to begin exfiltrating corporate data.
Which security profile feature could have been used to prevent the communication with the command-and-control server?

Create an anti-spyware profile and enable DNS Sinkhole feature.
Create an antivirus profile and enable its DNS Sinkhole feature.
Create a URL filtering profile and block the DNS Sinkhole URL category
Create a Data Filtering Profiles and enable its DNS Sinkhole feature.

Answer(s): D

Reveal Solution Next Question

QUESTION: 84

You must configure which firewall feature to enable a data-plane interface to submit DNS queries on behalf of the control plane?

virtual router
Admin Role profile
DNS proxy
service route

Answer(s): C

Reference:

https://weberblog.net/palo-alto-dns-proxy-for-management-services/

Reveal Solution Next Question

Free PCNSA Exam Braindumps (page: 21)

QUESTION: 81

QUESTION: 82

QUESTION: 83

QUESTION: 84

Reference: