Which two firewall components enable you to configure SYN flood protection thresholds? (Choose two)

The correct answer is C. Zone Protection Profile D. DoS Protection Profile. SYN flood protection thresholds can be configured in two distinct firewall components: (1) Zone Protection Profile - which provides aggregate flood protection applied at the ingress zone level, protecting all interfaces within a zone from volumetric SYN flood attacks; and (2) DoS

Submitted by kevin_r· Apr 18, 2026Deploy and Configure

Question

Options

ADos Protection policy
BQoS Profile
CZone Protection Profile
DDoS Protection Profile

How the community answered

(23 responses)

A
9% (2)
B
4% (1)
C
87% (20)

Explanation

SYN flood protection thresholds can be configured in two distinct firewall components: (1) Zone Protection Profile - which provides aggregate flood protection applied at the ingress zone level, protecting all interfaces within a zone from volumetric SYN flood attacks; and (2) DoS Protection Profile - which provides classified (per-source or per-destination) flood protection and is applied via a DoS Protection policy rule. Both components include SYN flood threshold settings (alert, activate, and maximum rates). Option A (DoS Protection policy) is the policy that applies a DoS Protection Profile but does not itself contain the threshold configuration. Option B (QoS Profile) is used for traffic shaping and bandwidth management and has no relation to SYN flood protection.

Topics

#SYN flood protection#DoS protection#Zone Protection Profile#DoS Protection Profile

Community Discussion

No community discussion yet for this question.

Full PCNSE Practice