Exam PCNSE topic 1 question 95 discussion

Actual exam question from Palo Alto Networks's PCNSE

Question #: 95
Topic #: 1

A client has a sensitive application server in their data center and is particularly concerned about resource exhaustion because of distributed denial-of-service attacks.
How can the Palo Alto Networks NGFW be configured to specifically protect this server against resource exhaustion originating from multiple IP addresses (DDoS attack)?

A. Define a custom App-ID to ensure that only legitimate application traffic reaches the server.
B. Add a Vulnerability Protection Profile to block the attack.
C. Add QoS Profiles to throttle incoming requests.
D. Add a DoS Protection Profile with defined session count.

Show Suggested Answer

Suggested Answer: D 🗳️

by zhawk7661 at July 13, 2020, 7:46 p.m.

Comments

Submit Cancel

zhawk7661

Highly Voted 4 years, 6 months ago

ANSWER: D

upvoted 9 times

...

Marshpillowz

Most Recent 12 months ago

Selected Answer: D

Correct answer is D

upvoted 1 times

...

TAKUM1y

2 years, 3 months ago

Selected Answer: D

https://docs.paloaltonetworks.com/pan-os/10-2/pan-os-admin/zone-protection-and-dos-protection/zone-defense/dos-protection-profiles-and-policy-rules/dos-protection-profiles#ida42d52fa-3366-4695-bb4a-d39ebf3b6a5f

upvoted 3 times

...

UFanat

2 years, 7 months ago

Selected Answer: D

DoS protection profile should be used

upvoted 2 times

...

FS68

3 years, 3 months ago

D is correct

upvoted 2 times

...

tech_catarina_mall

4 years, 4 months ago

Updated link: https://docs.paloaltonetworks.com/pan-os/9-1/pan-os-admin/zone-protection-and-dos-protection/zone-defense/dos-protection-profiles-and-policy-rules/dos-protection-profiles.html

upvoted 2 times

...