Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
Palo Alto Networks Certified Network Security Administrator (PCNSA) · Palo Alto Networks
Select 2 answers.
This question asks for 2 answers, but our data marks only 1. Compare with the community discussion below for the full answer.
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
As per mirko's explanation
C. It functions like PAN-DB and requires activation through the app portal. The DNS Security service is a cloud-based service similar to PAN-DB in its operation and requires activation through the Palo Alto Networks application portal. D. It removes the 100K limit for DNS entries for the downloaded DNS updates. Traditional DNS updates have a limit of 100,000 entries. The DNS Security service removes this limitation by using cloud-based dynamic lookups instead of relying solely on static database entries. B is not correct B. It eliminates the need for dynamic DNS updates. This statement is incorrect as dynamic updates are still necessary for DNS Security to provide real-time protection against threats
see links by Cyril