Palo Alto Networks Exam PSE-DataCenter Topic 1 Question 1 Discussion

Actual exam question for Palo Alto Networks's PSE-DataCenter exam

Question #: 1
Topic #: 1

A client has a sensitive application server in their data center and is particularly concerned about session flooding because of denial of-service attacks.

How can the Palo Alto Networks NGFW be configured to specifically protect this server against session floods originating from a single IP address?

ADefine a custom App-ID to ensure that only legitimate application traffic reaches the server

BAdd QoS Profiles to throttle incoming requests

CAdd a tuned DoS Protection Profile

DAdd an Anti-Spyware Profile to block attacking IP address

Show Suggested Answer

Suggested Answer: C

by Peggie at Jan 09, 2025, 05:06 AM

Limited Time Offer

25%

Off

Get Premium PSE-DataCenter Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Stephane

4 months ago

Hmm, I wonder if the client's server is protected by a swarm of cybersecurity ninjas. But in all seriousness, C is the correct choice here.

upvoted 0 times

...

Kenneth

4 months ago

Haha, I bet the client is just picturing their server getting flooded with requests like a horde of angry bees. Option C is the answer, no doubt about it.

upvoted 0 times

Margot

3 months ago

I agree, that would definitely help protect the server from session floods.

upvoted 0 times

...

Shelia

4 months ago

I agree, that would definitely help protect against session floods

upvoted 0 times

...

Hyman

4 months ago

Option C) Add a tuned DoS Protection Profile

upvoted 0 times

...

Larae

4 months ago

Option C) Add a tuned DoS Protection Profile

upvoted 0 times

...

Claribel

4 months ago

I'm not sure, but I think adding an Anti-Spyware Profile could also help in blocking attacking IP addresses.

upvoted 0 times

...

Jesusita

4 months ago

I agree with Kathrine, a DoS Protection Profile would be the best option to protect against session floods.

upvoted 0 times

...

Arlette

4 months ago

Definitely C. Protecting against session floods is all about setting the right DoS thresholds and response actions. This is precisely what a DoS Protection Profile is designed for.

upvoted 0 times

...

Claribel

5 months ago

I think option C is the way to go. A DoS Protection Profile can help mitigate session floods by setting thresholds and taking action against offending IP addresses.

upvoted 0 times