Discuss Palo Alto Networks PSE-SASE Exam Topic 6 Question 74

Which action protects against port scans from the internet?

AApply App-ID Security policy rules to block traffic sourcing from the untrust zone.

BAssign Security profiles to Security policy rules for traffic sourcing from the untrust zone.

CApply a Zone Protection profile on the zone of the ingress interface.

DAssign an Interface Management profile to the zone of the ingress surface.

Suggested Answer: C

Get Premium PSE-SASE Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test

22 comments · newest first

Nydia 4 days ago

I agree, C makes sense. It directly targets the ingress interface.

Gladys 10 days ago

I think C is the best choice. Zone Protection is key.

Jose 15 days ago

C is definitely the strongest option here.

Allene 20 days ago

D seems irrelevant for this question. Focus on traffic.

Craig 25 days ago

B is interesting, but not as effective against scans.

Weldon 1 month ago

A could work too, but I feel C is more direct.

Tonette 1 month ago

I agree, C makes sense. It adds an extra layer.

Bette 1 month ago

I think C is the best choice. Zone Protection is key.

Teri 2 months ago

B is important, but it doesn't directly stop scans.

Angelyn 2 months ago

Not sure if C is enough on its own, though.

Deeanna 2 months ago

Definitely C! Surprised it's even a question.

Kristine 2 months ago

I think A could work too, but not as effectively.

Nelida 2 months ago

C is the best choice for port scan protection.

Kristin 2 months ago

Not sure if any of these really stop port scans...

Dwight 3 months ago

Wait, I thought D was the right answer?

Shantay 3 months ago

Definitely going with C!

Evelynn 3 months ago

I think A is more effective, though.

Anna 3 months ago

C is the best option for port scan protection.

Gearldine 3 months ago

I don’t recall much about interface management profiles, so I’m hesitant about option D. It feels less related to protecting against port scans compared to the others.

Rolland 3 months ago

I’m leaning towards option B since assigning security profiles seems like a good way to manage traffic, but I’m not sure if it specifically addresses port scans.

Lavonda 4 months ago

I remember practicing a similar question where we had to block unwanted traffic. I feel like option A could be relevant, but I’m not confident.

Veronika 5 months ago

I think option C sounds familiar because we discussed zone protection profiles in class, but I'm not entirely sure if it's the best choice for port scans.

Palo Alto Networks PSE-SASE Exam - Topic 6 Question 74 Discussion