Which protection feature is available only in a Zone Protection Profile?

The correct answer is C. Port Scan Protection. Port Scan Protection is exclusively available in a Zone Protection Profile. It detects and blocks reconnaissance activity where an attacker probes multiple ports on a host. SYN Flood Protection (using SYN Cookies), ICMP Flood Protection, and UDP Flood Protection are all…

Submitted by carter_n· Apr 18, 2026Deploy and Configure

Question

Options

ASYN Flood Protection using SYN Flood Cookies
BICMP Flood Protection
CPort Scan Protection
DUDP Flood Protections

How the community answered

(36 responses)

A
3% (1)
B
6% (2)
C
89% (32)
D
3% (1)

Explanation

Port Scan Protection is exclusively available in a Zone Protection Profile. It detects and blocks reconnaissance activity where an attacker probes multiple ports on a host. SYN Flood Protection (using SYN Cookies), ICMP Flood Protection, and UDP Flood Protection are all available in both Zone Protection Profiles and DoS Protection Profiles. Because port scanning is inherently a zone-level threat-targeting the network as a whole rather than individual sessions-Palo Alto Networks placed this control only at the zone level.

Topics

#Zone Protection Profiles#Port Scan Protection#Security Features#Threat Prevention

Community Discussion

No community discussion yet for this question.

Full PCNSE Practice