Welcome to ExamTopics
ExamTopics Logo
- Expert Verified, Online, Free.

Unlimited Access

Get Unlimited Contributor Access to the all ExamTopics Exams!
Take advantage of PDF Files for 1000+ Exams along with community discussions and pass IT Certification Exams Easily.

Exam PCNSE topic 1 question 49 discussion

Actual exam question from Palo Alto Networks's PCNSE
Question #: 49
Topic #: 1
[All PCNSE Questions]

A client is concerned about resource exhaustion because of denial-of-service attacks against their DNS servers.
Which option will protect the individual servers?

  • A. Enable packet buffer protection on the Zone Protection Profile.
  • B. Apply an Anti-Spyware Profile with DNS sinkholing.
  • C. Use the DNS App-ID with application-default.
  • D. Apply a classified DoS Protection Profile.
Show Suggested Answer Hide Answer
Suggested Answer: D 🗳️

Comments

Chosen Answer:
This is a voting comment (?) , you can switch to a simple comment.
Switch to a voting comment New
Edu147
Highly Voted 4 years, 8 months ago
Correct is D They want to protect just one specific server, if you apply the zone protection you are protecting the entire zone
upvoted 27 times
Chris71Mach1
1 year, 2 months ago
The explanation we all need. Thanks!
upvoted 3 times
...
...
Ripu
Highly Voted 3 years, 9 months ago
Answer:D
upvoted 5 times
Barry_Allen
3 years, 1 month ago
:D smiling face
upvoted 5 times
...
...
Marshpillowz
Most Recent 2 months ago
Selected Answer: D
D is correct
upvoted 1 times
...
[Removed]
9 months, 2 weeks ago
Correct is D DOS protection if for resources behind the firewall. Zone Protection is for the firewall.
upvoted 2 times
...
Pochex
1 year ago
Answer D is the correct one. Classified profiles protect individual critical resources, especially servers that users access from the internet, and are often attack targets, such as web servers, database servers, and DNS servers. Please refer to https://docs.paloaltonetworks.com/pan-os/10-1/pan-os-admin/zone-protection-and-dos-protection/zone-defense/dos-protection-profiles-and-policy-rules/classified-versus-aggregate-dos-protection
upvoted 1 times
...
yazid0016
1 year, 3 months ago
Correct answer : D
upvoted 1 times
...
yazid0016
1 year, 3 months ago
Correct answer is D
upvoted 1 times
...
Woody
1 year, 3 months ago
https://docs.paloaltonetworks.com/pan-os/9-1/pan-os-admin/zone-protection-and-dos-protection/zone-defense/dos-protection-profiles-and-policy-rules/classified-versus-aggregate-dos-protection#id56c14277-0ecd-4e32-b3d3-7b616176204a D.
upvoted 3 times
...
UFanat
1 year, 9 months ago
Selected Answer: D
D. Apply a classified DoS Protection Profile.
upvoted 1 times
...
lgkhan
2 years, 4 months ago
Selected Answer: D
D is correct.
upvoted 2 times
...
Kane002
2 years, 4 months ago
Selected Answer: D
D. Single protection is for DoS.
upvoted 3 times
...
zuby76
2 years, 5 months ago
D is the right answer Packet Buffer protection is indeed the way to protect against resource exhaustion, but it is not configured under DoS protection profile. It is directly enabled under Zones.
upvoted 3 times
...
chris_fgt
2 years, 7 months ago
D is the correct answer
upvoted 1 times
...
Zabol
2 years, 9 months ago
Definitely D is correct
upvoted 1 times
...
YasserSaied
2 years, 9 months ago
D -- it couldn't be else
upvoted 1 times
...
yogininangpal
2 years, 10 months ago
D is the correct answer, for specific servers not the entire zone so correct answer is not A
upvoted 1 times
...
rocioha
3 years ago
D is correct
upvoted 2 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...