PCNSE · Question #21
Which two methods can be used to mitigate resource exhaustion of an application server? (Choose two)
The correct answer is B. DoS Protection Profile D. Zone Protection Profile. Both DoS Protection Profiles (B) and Zone Protection Profiles (D) are designed to mitigate resource exhaustion on servers and network infrastructure. A DoS Protection Profile applies rate-limiting thresholds (SYN, UDP, ICMP floods) to specific classified or aggregate traffic…
Question
Which two methods can be used to mitigate resource exhaustion of an application server? (Choose two)
Options
- AVulnerability Object
- BDoS Protection Profile
- CData Filtering Profile
- DZone Protection Profile
How the community answered
(25 responses)- A4% (1)
- B88% (22)
- C8% (2)
Explanation
Both DoS Protection Profiles (B) and Zone Protection Profiles (D) are designed to mitigate resource exhaustion on servers and network infrastructure. A DoS Protection Profile applies rate-limiting thresholds (SYN, UDP, ICMP floods) to specific classified or aggregate traffic flows targeting a server. A Zone Protection Profile applies flood protection thresholds at the ingress zone level, limiting the rate at which new connections can be established into a zone. Together they provide layered flood/DoS defense. A Vulnerability Protection profile (not listed as 'Vulnerability Object') detects exploit attempts but does not throttle connection rates. A Data Filtering Profile inspects content for sensitive data exfiltration and does not address resource exhaustion.
Topics
Community Discussion
No community discussion yet for this question.