Discuss Palo Alto Networks PSE-DataCenter Exam Topic 5 Question 24

A client has a sensitive application server in their data center and is particularly concerned about session flooding because of denial of-service attacks.

How can the Palo Alto Networks NGFW be configured to specifically protect this server against session floods originating from a single IP address?

ADefine a custom App-ID to ensure that only legitimate application traffic reaches the server

BAdd QoS Profiles to throttle incoming requests

CAdd a tuned DoS Protection Profile

DAdd an Anti-Spyware Profile to block attacking IP address

Suggested Answer: C

Get Premium PSE-DataCenter Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test

24 comments · newest first

Elly 4 days ago

Definitely C! We need to focus on session management.

Tijuana 10 days ago

C gives direct protection against the attack type.

Shayne 15 days ago

D seems less relevant; it’s more about spyware, not floods.

Ammie 20 days ago

I feel like C is the most effective for this scenario.

Geraldine 25 days ago

Option B might slow things down, but not stop the flood.

Justine 1 month ago

Option A could help too, but it’s more about identifying traffic.

Timmy 1 month ago

Agreed! It specifically targets session floods.

Sophia 1 month ago

I think option C is the best choice. DoS Protection Profile is crucial.

Delfina 2 months ago

Definitely C! It's all about preventing those floods.

Chu 2 months ago

C gives us the right tools to handle the threat.

Benton 2 months ago

D seems too broad; we need focused protection.

Denise 2 months ago

I feel like B could slow things down, but not stop them.

Dannie 2 months ago

A custom App-ID could help too, but C is more direct.

Loise 2 months ago

Agreed! C really targets session floods effectively.

Lilli 3 months ago

I think C is the best choice. DoS Protection is crucial.

Quinn 3 months ago

Definitely C, but I wonder if it’s enough for serious attacks.

Timothy 3 months ago

Really? A tuned DoS profile? Sounds too simple.

Jacquelyne 3 months ago

QoS Profiles can help, but not the main solution here.

Lelia 3 months ago

I think A is more effective for app-specific traffic.

Gail 3 months ago

C is the best option for DoS protection.

Avery 4 months ago

I recall a practice question where we used DoS Protection Profiles, so I’m leaning towards option C as well, but I’m not completely confident.

Brett 5 months ago

I feel like defining a custom App-ID in option A might be too specific for just session flooding. It seems like a broader solution.

Temeka 5 months ago

I'm not entirely sure, but I remember something about QoS Profiles being useful for managing traffic. Could option B be a good approach too?

Jamika 6 months ago

I think option C is the right choice since a tuned DoS Protection Profile should help mitigate session floods effectively.

Palo Alto Networks PSE-DataCenter Exam - Topic 5 Question 24 Discussion