Palo Alto Networks System Engineer – Strata — Question 101

A customer with a fully licensed Palo Alto Networks firewall is concerned about threats based on domain generation algorithms (DGAs).
Which Security profile is used to configure Domain Name Security (DNS) to identify and block previously unknown DGA-based threats in real time?

Answer options

• A. Anti-Spyware profile
• B. URL Filtering profile
• C. Vulnerability Protection profile
• D. WildFire Analysis profile

Correct answer: A

Explanation

The correct answer is A, the Anti-Spyware profile, as it is specifically designed to identify and block threats like those from DGAs in real time. The other options, such as URL Filtering, Vulnerability Protection, and WildFire Analysis profiles, serve different purposes and do not focus on DGAs or real-time DNS threat identification.