nerdexam
Palo_Alto_Networks

PCNSE · Question #686

An engineer is tasked with configuring a Zone Protection profile on the untrust zone. Which three settings can be configured on a Zone Protection profile? (Choose three.)

The correct answer is A. Ethernet SGT Protection B. Protocol Protection D. Reconnaissance Protection. Ethernet SGT Protection: This protects against attacks that utilize specific Security Group Tags (SGTs) on Ethernet packets. Protocol Protection: This allows for the configuration of rules based on specific protocols, like blocking certain unwanted protocols from entering the…

Submitted by luis.pe· Apr 18, 2026Deploy and Configure

Question

An engineer is tasked with configuring a Zone Protection profile on the untrust zone. Which three settings can be configured on a Zone Protection profile? (Choose three.)

Options

  • AEthernet SGT Protection
  • BProtocol Protection
  • CDoS Protection
  • DReconnaissance Protection
  • EResource Protection

How the community answered

(17 responses)
  • A
    88% (15)
  • C
    6% (1)
  • E
    6% (1)

Explanation

Ethernet SGT Protection: This protects against attacks that utilize specific Security Group Tags (SGTs) on Ethernet packets. Protocol Protection: This allows for the configuration of rules based on specific protocols, like blocking certain unwanted protocols from entering the zone. Reconnaissance Protection: This helps detect and prevent attempts to gather information about the network by attackers.

Topics

#Zone Protection#Security Profiles#Threat Prevention#Network Configuration

Community Discussion

No community discussion yet for this question.

Full PCNSE Practice