PCNSE Question #565: Real Exam Question with Answer & Explanation

Question

A firewall administrator is investigating high packet buffer utilization in the company firewall. After looking at the threat logs and seeing many flood attacks coming from a single source that are dropped by the firewall, the administrator decides to enable packet buffer protection to protect against similar attacks. The administrator enables packet buffer protection globally in the firewall but still sees a high packet buffer utilization rate. What else should the administrator do to stop packet buffers from being overflowed?

Options

• AApply DOS profile to security rules allow traffic from outside.
• BEnable packet buffer protection for the affected zones.
• CAdd the default Vulnerability Protection profile to all security rules that allow traffic from outside.
• DAdd a Zone Protection profile to the affected zones.