Which two firewall components enable you to configure SYN flood protection thresholds? (Choose two.)

The correct answer is B. DoS Protection profile C. Zone Protection profile. SYN flood thresholds are configurable in two places: (1) Zone Protection profiles, which apply aggregate flood protection at the zone level - triggering when the combined SYN rate across all sessions entering that zone exceeds a threshold; and (2) DoS Protection profiles, which…

Submitted by olafpl· Apr 18, 2026Configure

Question

Options

AQoS profile
BDoS Protection profile
CZone Protection profile
DDoS Protection policy

How the community answered

(31 responses)

A
3% (1)
B
90% (28)
D
6% (2)

Explanation

SYN flood thresholds are configurable in two places: (1) Zone Protection profiles, which apply aggregate flood protection at the zone level - triggering when the combined SYN rate across all sessions entering that zone exceeds a threshold; and (2) DoS Protection profiles, which apply per-classified-traffic limits (per source IP, destination IP, or session) and are enforced via DoS Protection policies. A QoS profile manages bandwidth and traffic prioritization, not flood thresholds. A DoS Protection policy references a DoS Protection profile but does not itself define the thresholds.

Topics

#SYN Flood Protection#DoS Protection#Zone Protection#Security Profiles

Community Discussion

No community discussion yet for this question.

Full PCNSA Practice