Exam PCNSA All QuestionsBrowse all questions from this exam
Question 255

What are three Palo Alto Networks best practices when implementing the DNS Security Service? (Choose three.)

    Correct Answer: A, C, E

    When implementing the DNS Security Service by Palo Alto Networks, it is essential to take specific best practices into account. Firstly, configuring a URL Filtering profile is crucial as it helps manage access to websites and prevent threats coming from malicious URLs. Secondly, planning for mobile-employee risk is important because mobile employees often connect from various networks, increasing the risk of security breaches that need to be mitigated. Lastly, implementing a threat intel program is critical as it allows the organization to stay informed about evolving threats and better defend against advanced attacks leveraging DNS. Each of these best practices aims to enhance the overall security posture and address various aspects of network security.

Discussion
[Removed]Options: BCE

Based on the following source, BCE appear to be the best practices https://www.paloaltonetworks.com/cyberpedia/what-is-dns-tunneling Read the Best practices section.

noloxOptions: ABE

According to article that hugodiaz provided it should be ABCE :D

DatITGuyTho1337Options: ACE

Answer should be ACE based on the article that hugodiaz provided.

cjaceOptions: ADE

A D E - A. Configure a URL Filtering profile: URL Filtering is an integral part of DNS Security and helps in controlling access to websites based on URLs. D. Rely on a DNS resolver: DNS resolver is crucial for DNS Security as it helps in resolving domain names to IP addresses. E. Implement a threat intel program: DNS Security leverages threat intelligence to protect against advanced threats using DNS.

mariooiram87Options: BCE

Answer directly from Palo Alto https://www.paloaltonetworks.com/cyberpedia/what-is-dns-tunneling

spykasgrOptions: BCE

it is BCE according to https://www.paloaltonetworks.com/cyberpedia/what-is-dns-tunneling

KariammaOptions: BCE

BCE is the correct answer

noloxOptions: ACE

I would say ACE