Infrastructure Management And CDSS

What is the primary function of the 'DNS Sinkhole' feature in a DNS Security profile?

You are configuring Advanced URL Filtering. Users report that a site is being blocked, but the category is 'Newly Registered Domains'. How can you allow access to this specific site while keeping the policy for other newly registered domains?

A company is experiencing high false-positive rates with WildFire for custom proprietary executable files. What is the recommended configuration to minimize these while maintaining security?

An administrator needs to enable Threat Prevention to protect against a specific zero-day exploit. How are the signatures for these new threats delivered to the firewall?

Which action is required to ensure that WildFire analysis results are applied to traffic as quickly as possible?

You are deploying Advanced URL Filtering. How does the 'Credential Phishing' prevention feature operate?

How does the 'Advanced URL Filtering' subscription improve upon standard URL Filtering?

Where is the configuration located to enable the 'DNS Security' service on a specific security zone?

When managing infrastructure, what is the best practice for handling 'Security Profile Groups'?

What is the impact of selecting 'Action: Reset-Both' in a Threat Prevention profile for a detected vulnerability?

An administrator finds that the 'Threat Prevention' logs are not showing any data, despite having an active subscription. What is the most likely cause?

A user is blocked by a URL Filtering profile. Where can you find the specific log entry that explains why the block occurred?

What is the purpose of a 'Security Profile Group'?

Which feature allows you to block traffic based on a specific geographic region?

Which TWO criteria are used by the firewall to match a security policy rule?

Which TWO actions should be performed when configuring a new DNS Security profile to protect against DNS-based malware?

When managing WildFire, how can you ensure that you are receiving the latest threat signatures as soon as they are generated?

You need to ensure that the firewall logs identify traffic by the actual application name, even if the traffic is running on a non-standard port. Which mechanism makes this possible?

Which THREE components are required to successfully deploy and use Advanced URL Filtering?

Which TWO pieces of information are displayed in the 'WildFire Analysis' log?

Which TWO locations in the PAN-OS web interface are used to check the status of CDSS subscriptions?

Which THREE types of information can be used to create a custom URL category?

Which TWO steps are necessary to ensure that 'Threat Prevention' is protecting traffic against known vulnerabilities?