What will be the destination IP Address in that log entry?

Posted by: Pdfprep Category: PCNSE Tags: , ,

When a malware-infected host attempts to resolve a known command-and-control server, the traffic matches a security policy with DNS sinhole enabled, generating a traffic log.

What will be the destination IP Address in that log entry?
A . The IP Address of sinkhole.paloaltonetworks.com
B . The IP Address of the command-and-control server
C . The IP Address specified in the sinkhole configuration
D . The IP Address of one of the external DNS servers identified in the anti-spyware database

Answer: C

Explanation:

https://live.paloaltonetworks.com/t5/MaHYPERLINK "https://live.paloaltonetworks.com/t5/Management-Articles/How-to-Verify-DNS-Sinkhole-Function-

is-Working/ta-p/65864"naHYPERLINK "https://live.paloaltonetworks.com/t5/Management-

Articles/How-to-Verify-DNS-Sinkhole-Function-is-Working/ta-p/65864"gement-Articles/How-to-Verify-DNS-Sinkhole-Function-is-Working/ta-p/65864

Leave a Reply

Your email address will not be published.