Palo Alto Networks Exam PSE-DataCenter Topic 1 Question 11 Discussion

Actual exam question for Palo Alto Networks's PSE-DataCenter exam

Question #: 11
Topic #: 1

A client has a sensitive application server in their data center and is particularly concerned about resource exhaustion because of distributed denial-of-service attacks.

How can the Palo Alto Networks NGFW be configured to specifically protect this server against resource exhaustion originating from multiple IP addresses (DDoS attack)?

ADefine a custom App-ID to ensure that only legitimate application traffic reaches the server.

BAdd a Vulnerability Protection Profile to block the attack.

CAdd QoS Profiles to throttle incoming requests.

DAdd a DoS Protection Profile with defined session count.

Show Suggested Answer

Suggested Answer: D

by Fannie at Jun 15, 2025, 02:52 PM

Limited Time Offer

25%

Off

Get Premium PSE-DataCenter Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Malcom

2 days ago

Haha, the client must be really stressed about this DDoS threat. I bet they're picturing their server crashing like a stack of dominoes!

upvoted 0 times

...

Malissa

7 days ago

C) Add QoS Profiles to throttle incoming requests. This could help manage the load, but I'm not sure it's as specific as a DoS Protection Profile.

upvoted 0 times

...

Jutta

13 days ago

D) Add a DoS Protection Profile with defined session count. This seems like the most targeted approach to protecting against resource exhaustion from a DDoS attack.

upvoted 0 times

...