PCNSE · Question #250
A client has a sensitive application server in their data center and is particularly concerned about resource exhaustion because of distributed denial-of-service attacks. How can the Palo Alto…
The correct answer is D. Add a DoS Protection Profile with defined session count. A DoS Protection Profile with a defined session count limit is the correct tool for protecting against resource exhaustion from DDoS attacks originating from multiple IPs. You can set thresholds for maximum concurrent sessions, and classify/limit traffic from many sources…
Question
A client has a sensitive application server in their data center and is particularly concerned about resource exhaustion because of distributed denial-of-service attacks. How can the Palo Alto Networks NGFW be configured to specifically protect this server against resource exhaustion originating from multiple IP addresses (DDoS attack)?
Options
- ADefine a custom App-ID to ensure that only legitimate application traffic reaches the server.
- BAdd a Vulnerability Protection Profile to block the attack.
- CAdd QoS Profiles to throttle incoming requests.
- DAdd a DoS Protection Profile with defined session count.
How the community answered
(51 responses)- A6% (3)
- B14% (7)
- C4% (2)
- D76% (39)
Explanation
A DoS Protection Profile with a defined session count limit is the correct tool for protecting against resource exhaustion from DDoS attacks originating from multiple IPs. You can set thresholds for maximum concurrent sessions, and classify/limit traffic from many sources simultaneously. Vulnerability Protection Profiles block exploits, not volumetric DoS. QoS throttles bandwidth, not session counts. A custom App-ID filters by application type but does not limit connection rates or session counts from distributed sources.
Topics
Community Discussion
No community discussion yet for this question.