Exam PCNSE topic 1 question 135 discussion

Actual exam question from Palo Alto Networks's PCNSE

Question #: 135
Topic #: 1

A client has a sensitive application server in their data center and is particularly concerned about session flooding because of denial-of-service attacks.
How can the Palo Alto Networks NGFW be configured to specifically protect this server against session floods originating from a single IP address?

A. Add an Anti-Spyware Profile to block attacking IP address
B. Define a custom App-ID to ensure that only legitimate application traffic reaches the server
C. Add QoS Profiles to throttle incoming requests
D. Add a tuned DoS Protection Profile

Show Suggested Answer

Suggested Answer: D 🗳️

by mattass at May 22, 2020, 6:29 a.m.

Comments

Submit Cancel

nicolasjiang

Highly Voted 4 years, 6 months ago

correct D

upvoted 8 times

...

Marshpillowz

Most Recent 12 months ago

Selected Answer: D

D is correct

upvoted 1 times

...

omgt2k2

1 year ago

Selected Answer: D

https://docs.paloaltonetworks.com/pan-os/11-0/pan-os-admin/zone-protection-and-dos-protection/zone-defense/dos-protection-profiles-and-policy-rules#:~:text=DoS%20Protection%20policy%20rules%20determine,help%20defend%20against%20DoS%20attacks.

upvoted 1 times

...

Prutser2

3 years, 6 months ago

answr d

upvoted 3 times

Woody

2 years, 1 month ago

https://docs.paloaltonetworks.com/pan-os/9-1/pan-os-admin/zone-protection-and-dos-protection/zone-defense/dos-protection-profiles-and-policy-rules/dos-protection-profiles

upvoted 2 times

...

mattass

4 years, 8 months ago

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClmTCAS

upvoted 4 times

...