Palo Alto Networks Exam PSE-Platform Topic 1 Question 59 Discussion

Actual exam question for Palo Alto Networks's PSE-Platform exam

Question #: 59
Topic #: 1

[All PSE-Platform Questions]

Which profile or policy should be applied to protect against port scans from the internet?

AAn App-ID security policy rule to block traffic sourcing from the untrust zone

BSecurity profiles to security policy rules for traffic sourcing from the untrust zone

CInterface management profile on the zone of the ingress interface

DZone protection profile on the zone of the ingress interface

Show Suggested Answer

Suggested Answer: C, D

by Theola at May 01, 2024, 06:56 AM

Limited Time Offer

25%

Off

Get Premium PSE-Platform Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Gerald

17 days ago

D) Zone protection profile? Is that like a superhero cape for my firewall? Because if it is, I want one with glitter and unicorns.

upvoted 0 times

...

Keva

18 days ago

Wait, we're supposed to protect against port scans? I thought we were supposed to run as many port scans as possible to get a high score. Guess I've been doing this all wrong.

upvoted 0 times

...

Magdalene

1 months ago

B) Security profiles to security policy rules? Now we're talking! I bet the person who wrote this question spends their weekends coding up complex firewall policies for fun.

upvoted 0 times

Victor

1 days ago

C) Interface management profile on the zone of the ingress interface

upvoted 0 times

...

Blair

3 days ago

A) An App-ID security policy rule to block traffic sourcing from the untrust zone

upvoted 0 times

...

Olive

22 days ago

B) Security profiles to security policy rules for traffic sourcing from the untrust zone

upvoted 0 times

...

Helga

25 days ago

A) An App-ID security policy rule to block traffic sourcing from the untrust zone

upvoted 0 times

...

Suzi

1 months ago

C) Interface management profile? Really? That's like trying to catch a speeding bullet with a butterfly net. Not the most effective solution, if you ask me.

upvoted 0 times

...

Vallie

1 months ago

A) An App-ID security policy rule? Nah, that's way too complicated. I just want something that's going to block those scans without making me think too hard.

upvoted 0 times

...

Apolonia

1 months ago

D) Zone protection profile on the zone of the ingress interface seems like the obvious choice here. I mean, who doesn't love a good zone profile to protect against those pesky port scans?

upvoted 0 times