Which sessions does Packet Buffer Protection apply to when used on ingress zones to protect against single-session DoS attacks?

The correct answer is D. Existing sessions and is global. Packet Buffer Protection (PBP) defends against single-session DoS attacks that flood the firewall's packet buffer, causing resource exhaustion. When PBP is applied to ingress zones, it acts on existing sessions - it monitors active sessions consuming excessive buffer resources…

Submitted by tom_us· Apr 18, 2026Core Concepts

Question

Options

ANew sessions and is global
BNew sessions and is not global
CExisting sessions and is not global
DExisting sessions and is global

How the community answered

(25 responses)

B
8% (2)
C
4% (1)
D
88% (22)

Explanation

Packet Buffer Protection (PBP) defends against single-session DoS attacks that flood the firewall's packet buffer, causing resource exhaustion. When PBP is applied to ingress zones, it acts on existing sessions - it monitors active sessions consuming excessive buffer resources and can drop or throttle them. It is also global in scope, meaning the protection threshold and response apply system-wide across the entire firewall, not just to a specific zone or subset of traffic. This distinguishes it from Zone Protection, which is applied per-zone and affects new sessions.

Topics

#Packet Buffer Protection#DoS Protection#Zone Protection#Session Management

Community Discussion

No community discussion yet for this question.

Full PCNSE Practice