QUESTION: 13

DNS sinkholing helps identify infected hosts on the protected network using DNS traffic in situations where the firewall cannot see the infected client's DNS query (that is, the firewall cannot see the originator of DNS query)
Which of the following Statements is true?

DNS Sinkholing requires the Vulnerability Protection Profile be enabled.
Sinkholing malware DNS queries solves this visibilty problem by forging responses to the client host queries directed at fake domains created in a controlled "Fake Internet" called Zanadu which designed for testing and honeypots.
Infected hosts can then be easily identified in the traffic logs because any host that attempts to connect the sinkhole IP address are most likely infected with malware.
DNS Sinkholing requires a license SinkHole license in order to activate.

Answer(s): C

Reveal Solution Next Question

QUESTION: 14

Given the following network diagram, an administrator is considering the use of Windows Log Forwarding and Global Catalog servers for User-ID implementation. What are two potential bandwidth and processing bottlenecks to consider? (Choose two.)

Member Servers
Firewall
Domain Controllers
Windows Server

Answer(s): A,C

Reveal Solution Next Question

QUESTION: 15

What are three sources of malware sample data for the Palo Alto Networks Threat Intelligence Cloud? (Choose three.)

Third-Party data feeds, like the partnership with ProofPoint and the Cyber Threat Alliance
Palo Alto Networks AutoFocus generated Correlation Objects
Palo Alto Networks Next Generation Firewalls deployed with Wildfire Analysis Security Profiles
WF-500 configured as private clouds for privacy concerns
Palo Alto Networks non-firewall products, like Traps and Aperture

Answer(s): A,B,E

Explanation:

https://www.paloaltonetworks.com/products/secure-the-network/subscriptions/autofocus

Reveal Solution Next Question

QUESTION: 16

How do Highly Suspicious artifacts in-AutoFocus help identify when an unknown, potential zero-day, targeted attack occur to allow one to adjust the security posture?

Highly Suspicious artifacts are associated with High-Risk payloads that are inflicting massive amounts
of damage to end customers.
All High Risk artifacts are automatically classified as Highly Suspicious.
Highly Suspicious artifacts are High Risk artifacts that have been seen in very few samples.
Highly Suspicious artifacts have been seen infecting a broad, significant range of companies.

Answer(s): C

Reveal Solution Next Question

Free PSE-PLATFORM Exam Braindumps (page: 4)

QUESTION: 13

QUESTION: 14

QUESTION: 15

Explanation:

QUESTION: 16