exam questions

Exam PCNSE All Questions

View all questions & answers for the PCNSE exam

Exam PCNSE topic 1 question 174 discussion

Actual exam question from Palo Alto Networks's PCNSE
Question #: 174
Topic #: 1
[All PCNSE Questions]

Before an administrator of a VM-500 can enable DoS and zone protection, what actions need to be taken?

  • A. Create a zone protection profile with flood protection configured to defend an entire egress zone against SYN, ICMP, ICMPv6, UDP, and other IP flood attacks.
  • B. Add a WildFire subscription to activate DoS and zone protection features.
  • C. Replace the hardware firewall, because DoS and zone protection are not available with VM-Series systems.
  • D. Measure and monitor the CPU consumption of the firewall data plane to ensure that each firewall is properly sized to support DoS and zone protection.
Show Suggested Answer Hide Answer
Suggested Answer: D 🗳️

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
alanouaro
Highly Voted 2 years, 10 months ago
Option D Check and monitor firewall dataplane CPU consumption to ensure that each firewall is properly sized to support DoS and Zone Protection along with any other features that consume CPU cycles, such as decryption. https://docs.paloaltonetworks.com/pan-os/10-1/pan-os-admin/zone-protection-and-dos-protection.html
upvoted 7 times
...
Marshpillowz
Most Recent 9 months, 1 week ago
Selected Answer: D
D is correct
upvoted 1 times
...
lol12
2 years ago
Selected Answer: D
d https://docs.paloaltonetworks.com/pan-os/10-2/pan-os-admin/zone-protection-and-dos-protection
upvoted 3 times
...
TAKUM1y
2 years ago
Selected Answer: D
https://docs.paloaltonetworks.com/pan-os/10-2/pan-os-admin/zone-protection-and-dos-protection
upvoted 2 times
...
UFanat
2 years, 4 months ago
Selected Answer: D
Check and monitor firewall dataplane CPU consumption to ensure that each firewall is properly sized to support DoS and Zone Protection along with any other features that consume CPU cycles, such as decryption. If you use Panorama to manage your firewalls, use Device Monitor (PanoramaManaged DevicesHealth) to check and monitor the CPU consumption of all managed firewalls at one time. https://docs.paloaltonetworks.com/pan-os/10-2/pan-os-admin/zone-protection-and-dos-protection
upvoted 1 times
...
fireb
2 years, 5 months ago
D is the correct option.
upvoted 1 times
...
Gilmarcio
2 years, 9 months ago
Correct is "D". Because not "entire egress zone". Ingress true. 1 - https://docs.paloaltonetworks.com/best-practices/8-1/dos-and-zone-protection-best-practices/dos-and-zone-protection-best-practices/deploy-dos-and-zone-protection-using-best-practices.html#:~:text=DoS%20and%20Zone%20Protection%20help,device%20at%20the%20internet%20perimeter. 2 - https://docs.paloaltonetworks.com/pan-os/8-1/pan-os-admin/zone-protection-and-dos-protection/zone-defense/take-baseline-cps-measurements-for-setting-flood-thresholds/how-to-measure-cps.html
upvoted 3 times
...
rischa
2 years, 9 months ago
Option D is right
upvoted 2 times
...
Hiwanku
2 years, 10 months ago
Is D. Check and monitor firewall dataplane CPU consumption to ensure that each firewall is properly sized to support DoS and Zone Protection along with any other features that consume CPU cycles, such as decryption. If you use Panorama to manage your firewalls, use Device Monitor (PanoramaManaged DevicesHealth) to check and monitor the CPU consumption of all managed firewalls at one time.
upvoted 4 times
Marcyy
2 years, 10 months ago
You are right. D. https://docs.paloaltonetworks.com/pan-os/10-1/pan-os-admin/zone-protection-and-dos-protection.html
upvoted 2 times
...
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago