nerdexam
Palo_Alto_Networks

NETSEC-ANALYST · Question #349

Which Security profile generates an alert based on a threshold when the action is set to Alert?

The correct answer is C. DoS protection. DoS Protection profiles set thresholds that protect against new session IP flood attacks and provide resource protection (maximum concurrent session limits for specified endpoints and resources). DoS Protection profiles protect specific devices (classified profiles) and groups…

Threat Prevention

Question

Which Security profile generates an alert based on a threshold when the action is set to Alert?

Options

  • AVulnerability Protection
  • BAntivirus
  • CDoS protection
  • DAnti-Spyware

How the community answered

(45 responses)
  • A
    4% (2)
  • B
    4% (2)
  • C
    80% (36)
  • D
    11% (5)

Explanation

DoS Protection profiles set thresholds that protect against new session IP flood attacks and provide resource protection (maximum concurrent session limits for specified endpoints and resources). DoS Protection profiles protect specific devices (classified profiles) and groups of devices (aggregate profiles) against SYN, UDP, ICMP, ICMPv6, and Other IP flood attacks. Configuring Flood Protection thresholds in a DoS Protection profile is similar to configuring Flood Protection in a Zone Protection profile, but Zone Protection profiles protect entire ingress zones, while DoS protection profiles and policy rules are granular and targeted, and can even be classified to a single device (IP address). The firewall measures the aggregate number of connections-per-second (CPS) to a group of devices (aggregate profile) or measures the CPS to individual devices (classified profile).

Topics

#DoS protection profile#threshold alerts#security profiles#flood protection

Community Discussion

No community discussion yet for this question.

Full NETSEC-ANALYST Practice