Palo Alto Networks Exam PSE-Platform Topic 1 Question 51 Discussion

Actual exam question for Palo Alto Networks's PSE-Platform exam

Question #: 51
Topic #: 1

Which configuration creates the most comprehensive ''best-practice'' Anti Spyware profile to prevent command and Control traffic?

AClone the Strict Anti-Spyware Profile, enable DNS Sinkholing and Passive DNS Monitoring, and deploy this customized clone

BClone the Default Anti-Spyware Profile and enable DNS Sinkholing and Passive DNS Monitoring, and deploy this customized clone

CEdit and deploy the Default Anti-Spyware Profile (DNS Sinkholing and Passive DNS Monitoring is already enabled)

DEdit and deploy the Strict Anti-Spyware Profile Profile (DNS Sinkholing and Passive DNS Monitoring is already enabled)

Show Suggested Answer

Suggested Answer: A

by Pamella at Dec 13, 2023, 06:33 PM

Limited Time Offer

25%

Off

Get Premium PSE-Platform Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Stanton

8 months ago

Hmm, good point Joesph. I was also considering option C since it's less work to just edit an existing profile.

upvoted 0 times

...

Joesph

8 months ago

But option C says that DNS Sinkholing and Passive DNS Monitoring are already enabled in the Default Anti-Spyware Profile. That seems pretty comprehensive to me.

upvoted 0 times

...

Apolonia

8 months ago

I'm leaning towards option A, since it says to 'clone the Strict Anti-Spyware Profile' which sounds like the most comprehensive starting point.

upvoted 0 times

...

Shawnda

8 months ago

This question is definitely challenging. I'm not sure which configuration would create the most comprehensive 'best-practice' Anti-Spyware profile.

upvoted 0 times

Joaquin

8 months ago

upvoted 0 times

...

Frankie

8 months ago

upvoted 0 times

...

Paris

8 months ago

upvoted 0 times

...

Lauryn

8 months ago

upvoted 0 times

...