A client is concerned about resource exhaustion because of denial-of-service attacks against their DNS servers. Which option will protect the individual servers?
A.
Enable packet buffer protection on the Zone Protection Profile.
B.
Apply an Anti-Spyware Profile with DNS sinkholing.
Answer D is the correct one. Classified profiles protect individual critical resources, especially servers that users access from the internet, and are often attack targets, such as web servers, database servers, and DNS servers.
Please refer to https://docs.paloaltonetworks.com/pan-os/10-1/pan-os-admin/zone-protection-and-dos-protection/zone-defense/dos-protection-profiles-and-policy-rules/classified-versus-aggregate-dos-protection
https://docs.paloaltonetworks.com/pan-os/9-1/pan-os-admin/zone-protection-and-dos-protection/zone-defense/dos-protection-profiles-and-policy-rules/classified-versus-aggregate-dos-protection#id56c14277-0ecd-4e32-b3d3-7b616176204a
D.
D is the right answer
Packet Buffer protection is indeed the way to protect against resource exhaustion, but it is not configured under DoS protection profile. It is directly enabled under Zones.
This section is not available anymore. Please use the main Exam Page.PCNSE Exam Questions
Log in to ExamTopics
Sign in:
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
Edu147
Highly Voted 5 years, 9 months agoChris71Mach1
2 years, 3 months agoRipu
Highly Voted 4 years, 10 months agoBarry_Allen
4 years, 2 months agobing2021
Most Recent 10 months agoMarshpillowz
1 year, 3 months ago[Removed]
1 year, 10 months agoPochex
2 years, 2 months agoyazid0016
2 years, 4 months agoyazid0016
2 years, 4 months agoWoody
2 years, 4 months agoUFanat
2 years, 10 months agolgkhan
3 years, 5 months agoKane002
3 years, 5 months agozuby76
3 years, 6 months agochris_fgt
3 years, 9 months agoZabol
3 years, 10 months agoYasserSaied
3 years, 10 months agoyogininangpal
3 years, 12 months ago