nerdexam
Palo_Alto_Networks

PCNSA · Question #349

Which Security profile generates an alert based on a threshold when the action is set to Alert?

The correct answer is C. DoS protection. DoS Protection profiles are threshold-based: they define activate-rate and maximum-rate thresholds for flood types (SYN, UDP, ICMP, etc.). When the action is set to 'Alert', the firewall generates a log/alert once traffic volume crosses the configured activate threshold…

Submitted by fernanda_arg· Apr 18, 2026Configure

Question

Which Security profile generates an alert based on a threshold when the action is set to Alert?

Options

  • AVulnerability Protection
  • BAntivirus
  • CDoS protection
  • DAnti-Spyware

How the community answered

(33 responses)
  • A
    3% (1)
  • B
    6% (2)
  • C
    88% (29)
  • D
    3% (1)

Explanation

DoS Protection profiles are threshold-based: they define activate-rate and maximum-rate thresholds for flood types (SYN, UDP, ICMP, etc.). When the action is set to 'Alert', the firewall generates a log/alert once traffic volume crosses the configured activate threshold, without dropping connections. This threshold-triggered alerting is unique to DoS Protection profiles. Vulnerability Protection, Antivirus, and Anti-Spyware profiles operate on signature/heuristic matches against individual sessions - they do not use rate thresholds to trigger alert actions.

Topics

#DoS Protection#Security Profiles#Alert Thresholds

Community Discussion

No community discussion yet for this question.

Full PCNSA Practice