Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions
Mail Us support@pass4success.com
Location US
Mob_nav_barsMENU

Palo Alto Networks PSE-DataCenter Exam - Topic 4 Question 28 Discussion

A client has a sensitive application server in their data center and is particularly concerned about resource exhaustion because of distributed denial-of-service attacks.How can the Palo Alto Networks NGFW be configured to specifically protect this server against resource exhaustion originating from multiple IP addresses (DDoS attack)?
D) Add a DoS Protection Profile with defined session count.
A) Define a custom App-ID to ensure that only legitimate application traffic reaches the server.
B) Add a Vulnerability Protection Profile to block the attack.
C) Add QoS Profiles to throttle incoming requests.

Palo Alto Networks PSE-DataCenter Exam - Topic 4 Question 28 Discussion

Actual exam question for Palo Alto Networks's PSE-DataCenter exam
Question #: 28
Topic #: 4
[All PSE-DataCenter Questions]

A client has a sensitive application server in their data center and is particularly concerned about resource exhaustion because of distributed denial-of-service attacks.

How can the Palo Alto Networks NGFW be configured to specifically protect this server against resource exhaustion originating from multiple IP addresses (DDoS attack)?

Show Suggested Answer Hide Answer
Suggested Answer: D

by Eun at Jun 30, 2026, 09:14 AM

Limited Time Offer

25%

Off

Get Premium PSE-DataCenter Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

0/2000 characters
Submit Cancel
Dorthy
1 hour ago
I feel like C is a good backup. Throttling can reduce impact.
upvoted 0 times
...
Sophia
5 days ago
Option A could help too, but D is more focused on DDoS.
upvoted 0 times
...
Francesco
10 days ago
I agree, D makes sense. It directly targets session limits.
upvoted 0 times
...
Claribel
16 days ago
I think option D is the best choice. DoS Protection Profile is crucial.
upvoted 0 times
...
Altha
21 days ago
Blocking vulnerabilities is good, but it won't stop DDoS alone.
upvoted 0 times
...
Torie
26 days ago
Definitely surprised that people overlook DDoS profiles!
upvoted 0 times
...
Hector
1 month ago
QoS Profiles? Not sure that would help much.
upvoted 0 times
...
Adell
1 month ago
I think A is also important for filtering traffic.
upvoted 0 times
...
Nikita
1 month ago
D is the best option for DDoS protection.
upvoted 0 times
...
Socorro
2 months ago
Not sure if just one profile is enough for serious attacks.
upvoted 0 times
...
Jennie
2 months ago
Surprised that people overlook DDoS profiles!
upvoted 0 times
...
Clarence
2 months ago
QoS Profiles can help, but not the main solution here.
upvoted 0 times
...
Maile
2 months ago
I think A is also important for filtering traffic.
upvoted 0 times
...
Harley
2 months ago
D is the best option for DDoS protection.
upvoted 0 times
...
Becky
2 months ago
I’m a bit confused about the Vulnerability Protection Profile. It seems more focused on known vulnerabilities rather than resource exhaustion. Is that correct?
upvoted 0 times
...
Lavonda
3 months ago
I recall a practice question where we had to choose between custom App-IDs and DoS profiles. I think the DoS profile is more specific for this scenario.
upvoted 0 times
...
Lourdes
3 months ago
I'm not entirely sure, but I feel like adding a QoS profile could help manage traffic too. Maybe it’s a good complement to option D?
upvoted 0 times
...
Gilberto
3 months ago
I remember we discussed DDoS protection profiles in class, and I think option D sounds like the right approach for managing session counts.
upvoted 0 times
...

Save Cancel