PCNSA · Question #349
Which Security profile generates an alert based on a threshold when the action is set to Alert?
The correct answer is C. DoS protection. DoS Protection profiles are threshold-based: they define activate-rate and maximum-rate thresholds for flood types (SYN, UDP, ICMP, etc.). When the action is set to 'Alert', the firewall generates a log/alert once traffic volume crosses the configured activate threshold…
Question
Which Security profile generates an alert based on a threshold when the action is set to Alert?
Options
- AVulnerability Protection
- BAntivirus
- CDoS protection
- DAnti-Spyware
How the community answered
(33 responses)- A3% (1)
- B6% (2)
- C88% (29)
- D3% (1)
Explanation
DoS Protection profiles are threshold-based: they define activate-rate and maximum-rate thresholds for flood types (SYN, UDP, ICMP, etc.). When the action is set to 'Alert', the firewall generates a log/alert once traffic volume crosses the configured activate threshold, without dropping connections. This threshold-triggered alerting is unique to DoS Protection profiles. Vulnerability Protection, Antivirus, and Anti-Spyware profiles operate on signature/heuristic matches against individual sessions - they do not use rate thresholds to trigger alert actions.
Topics
Community Discussion
No community discussion yet for this question.