Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions
Mail Us support@pass4success.com
Location US
Mob_nav_barsMENU

Palo Alto Networks Exam PCNSE Topic 7 Question 79 Discussion

Actual exam question for Palo Alto Networks's Palo Alto Networks Certified Security Engineer PAN-OS 11.0 exam
Question #: 79
Topic #: 7
[All Palo Alto Networks Certified Security Engineer PAN-OS 11.0 Questions]

An engineer is configuring a Protection profile to defend specific endpoints and resources against malicious activity.

The profile is configured to provide granular defense against targeted flood attacks for specific critical systems that are accessed by users from the internet.

Which profile is the engineer configuring?

Show Suggested Answer Hide Answer
Suggested Answer: D

The engineer is configuring a DoS Protection profile to defend specific endpoints and resources against malicious activity. A DoS Protection profile is a feature that enables the firewall to detect and prevent denial-of-service (DoS) attacks that attempt to overwhelm network resources or disrupt services. A DoS Protection profile can provide granular defense against targeted flood attacks for specific critical systems that are accessed by users from the internet, such as web servers, DNS servers, or VPN gateways.A DoS Protection profile can be applied to a security policy rule that matches the traffic to and from the protected systems, and can specify the thresholds and actions for different types of flood attacks, such as SYN, UDP, ICMP, or other IP floods12.Reference:DoS Protection, PCNSE Study Guide (page 58)


by Lucy at Dec 24, 2023, 10:27 AM

Limited Time Offer

25%

Off

Get Premium PCNSE Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel
Nikita
24 days ago
You know, I was thinking the same thing, but then I started overthinking it. What if it's something more specific, like Zone Protection or Vulnerability Protection? Nah, you're right, DoS Protection is the way to go. I need to stop second-guessing myself on these exams!
upvoted 0 times
...
Karma
25 days ago
Yeah, I'm with you guys on this one. The question is pretty clear about the purpose of the profile, and D) DoS Protection is the only answer that really fits. I'm feeling pretty confident about this one.
upvoted 0 times
...
Myra
26 days ago
I agree, D) DoS Protection seems like the obvious choice here. The profile is designed to provide 'granular defense against targeted flood attacks' for critical systems, which is exactly what a DoS protection profile is meant to do.
upvoted 0 times
Marylin
7 days ago
Agreed, the engineer is most likely configuring a DoS Protection profile.
upvoted 0 times
...
Frederica
8 days ago
Definitely, DoS Protection seems like the right choice for this scenario.
upvoted 0 times
...
Alva
9 days ago
It would provide the granular defense needed for critical systems.
upvoted 0 times
...
Van
10 days ago
DoS Protection is specifically designed to defend against flood attacks.
upvoted 0 times
...
Lauran
11 days ago
Yes, that makes sense given the description.
upvoted 0 times
...
Georgene
12 days ago
I think the engineer is configuring a DoS Protection profile.
upvoted 0 times
...
...
Willetta
27 days ago
Hmm, this seems like a pretty straightforward question. I'm guessing the answer is D) DoS Protection. The question talks about configuring a profile to defend against 'malicious activity' and 'targeted flood attacks', which are classic signs of a Denial of Service (DoS) attack.
upvoted 0 times
...

Save Cancel