PCNSE Question #21: Real Exam Question with Answer & Explanation

Question

Which two methods can be used to mitigate resource exhaustion of an application server? (Choose two)

Options

• AVulnerability Object
• BDoS Protection Profile
• CData Filtering Profile
• DZone Protection Profile

Explanation

Both DoS Protection Profiles (B) and Zone Protection Profiles (D) are designed to mitigate resource exhaustion on servers and network infrastructure. A DoS Protection Profile applies rate-limiting thresholds (SYN, UDP, ICMP floods) to specific classified or aggregate traffic flows targeting a server. A Zone Protection Profile applies flood protection thresholds at the ingress zone level, limiting the rate at which new connections can be established into a zone. Together they provide layered flood/DoS defense. A Vulnerability Protection profile (not listed as 'Vulnerability Object') detects exploit attempts but does not throttle connection rates. A Data Filtering Profile inspects content for sensitive data exfiltration and does not address resource exhaustion.

No community discussion yet for this question.