PCNSE · Question #577
Which component enables you to configure firewall resource protection settings?
The correct answer is A. DoS Protection Profile. DoS Protection Profiles configure firewall resource protection settings by defining connection rate thresholds in aggregate and classified modes. Aggregate mode sets limits on all traffic destined to the firewall to protect its overall processing resources. Classified mode…
Question
Which component enables you to configure firewall resource protection settings?
Options
- ADoS Protection Profile
- BQoS Profile
- CZone Protection Profile
- DDoS Protection policy
How the community answered
(51 responses)- A86% (44)
- B2% (1)
- C8% (4)
- D4% (2)
Explanation
DoS Protection Profiles configure firewall resource protection settings by defining connection rate thresholds in aggregate and classified modes. Aggregate mode sets limits on all traffic destined to the firewall to protect its overall processing resources. Classified mode applies limits per source IP, destination IP, or source-destination pair. These thresholds directly guard the firewall from being overwhelmed by denial-of-service attacks. Zone Protection Profiles (C) protect zone perimeters from floods and reconnaissance but are broader in scope. QoS Profiles (B) manage bandwidth allocation. DoS Protection policies (D) apply profiles to traffic but do not contain the resource threshold settings themselves.
Topics
Community Discussion
No community discussion yet for this question.