What is the correct behavior when a Palo Alto Networks next-generation firewall (NGFW) is unable to retrieve a DNS verdict from DNS service cloud in the configured lookup time?

A. NGFW discard a response from the DNS server.

B. NGFW temporarily disable DNS Security function.

C. NGFW permit a response from the DNS server.

D. NGFW resend a verdict challenge to DNS service cloud.








 

Suggested Answer: C

Community Answer: C

Reference:
https://docs.paloaltonetworks.com/pan-os/9-1/pan-os-admin/threat-prevention/dns-security/enable-dns-security

This question is in PSE Strata Palo Alto Networks Systems Engineer (Strata) Exam
For getting Palo Alto Networks Systems Engineer (PSE Strata) Certificate





Disclaimers:
The website is not related to, affiliated with, endorsed or authorized by Palo Alto Networks. 
Trademarks, certification & product names are used for reference only and belong to Palo Alto Networks.
The website does not contain actual questions and answers from Palo Alto Networks's Certification Exams.