nerdexam
Palo_Alto_Networks

PCNSE · Question #625

The profile is configured to provide granular defense against targeted flood attacks for specific critical systems that are accessed by users from the internet. Which profile is the engineer…

The correct answer is B. DoS Protection. A DoS Protection profile provides per-source and per-destination flood protection and is applied via a Security policy rule, allowing it to target specific, named critical systems. This granularity distinguishes it from Zone Protection, which applies broadly to all traffic…

Submitted by katya_ua· Apr 18, 2026Deploy and Configure

Question

The profile is configured to provide granular defense against targeted flood attacks for specific critical systems that are accessed by users from the internet. Which profile is the engineer configuring?

Options

  • AVulnerability Protection
  • BDoS Protection
  • CPacket Buffer Protection
  • DZone Protection

How the community answered

(24 responses)
  • A
    4% (1)
  • B
    92% (22)
  • D
    4% (1)

Explanation

A DoS Protection profile provides per-source and per-destination flood protection and is applied via a Security policy rule, allowing it to target specific, named critical systems. This granularity distinguishes it from Zone Protection, which applies broadly to all traffic entering a zone. Because the scenario describes protecting specific critical systems accessed from the internet - rather than protecting an entire zone - DoS Protection is the appropriate profile.

Topics

#DoS Protection#Security Profiles#Threat Prevention#Flood Attacks

Community Discussion

No community discussion yet for this question.

Full PCNSE Practice