To enable DNS sinkholing, which two addresses should be reserved? (Choose two.)
To enable DNS sinkholing, which two addresses should be reserved? (Choose two.)
To enable DNS sinkholing, it is necessary to reserve addresses that can be used to redirect malicious traffic. Both IPv4 and IPv6 addresses are required because they ensure that traffic can be sinkholed regardless of which IP version is used. These addresses serve as the destinations for suspicious or unwanted DNS queries, aiding in the identification and mitigation of potential threats.
Correct answer IPv4 and IPv6: https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClGECA0
B. IPv6 D. IPv4 These are the IP addresses that are resolved to the default Palo Alto Networks sinkhole IP address12. The IP addresses currently are IPv4—sinkhole.paloaltonetworks.com and a loopback address IPv6 address—::12. These addresses are subject to change and can be updated with content updates