A.Categorize data and applications by levels of sensitivity

B.Validate user identities through authentication

C.Prioritize securing the endpoints of privileged users because if non-privileged user endpoints are exploited, the impact will be minimal due to perimeter controls

D.Gain visibility of and control over applications and functionality in the traffic flow using a port and protocol firewall

A.eDirectory monitoring

B.Client Probing

C.SNMP server

D.TACACS

E.Active Directory monitoring

F.Lotus Domino

G.RADIUS

A.5500x PAN-GPCS-USER-C-BAS-1YR, 1000x PAN-GPCS-NET-B-BAS-1YR, 1x PAN-SVC-BAS-PRA-25. 1x PAN-PRA-25

B.5500x PAN-GPCS-USER-C-BAS-1YR, 1000x PAN-GPCS-NET-B-BAS-1YRr 1x PAN-LGS-1TB-1YR, 1x PAN-PRA-25, 1x PAN-SVC-BAS-PRA-25

C.1x PAN-GPCS-USER-C-BAS-1YR, 1x PAN-GPCS-NET-B-BAS-1YR, 1x PAN-LGS-1TB-1YR

D.5500x PAN-GPCS-USER-C-BAS-1YR, 1000x PAN-GPCS-NET-B-BAS-1YR, 1x PAN-LGS-1TB-1YR

A.Cortex Data Lake

B.Pathfinder

C.Panorama

D.NGFW with PANOS 8 0.5 or later

E.Directory Syn Service

F.Traps

A.Sinkholing malware DNS queries solves this visibilty problem by forging responses to the client host queries directed at fake domains created in a controlled "Fake Internet" called Zanadu which designed for testing and honeypots.

B.Infected hosts can then be easily identified in the traffic logs because any host that attempts to connect the sinkhole IP address are most likely infected with malware.

C.DNS Sinkholing requires a license SinkHole license in order to activate.

D.DNS Sinkholing requires the Vulnerability Protection Profile be enabled.