nerdexam
Palo_Alto_Networks

PCNSE7 · Question #140

Which two statements accurately describe how DoS Protection Profiles and Policies mitigate attacks? (Choose two.)

The correct answer is C. They mitigate against attacks by providing resource protection by limiting the number of sessions D. They mitigate against attacks by utilizing "random early drop". In addition to flood protection, we also offer resources protection. This type of protection enforces a quota for your hosts. It restricts the maximum number of sessions allowed for a particular source IP address, destination IP address or IP source-destination pair. Zone…

Configure and Deploy

Question

Which two statements accurately describe how DoS Protection Profiles and Policies mitigate attacks? (Choose two.)

Options

  • AThey mitigate against volumetric attacks by leveraging known vulnerabilities, brute force methods,
  • BThey mitigate against attacks on a zone basis by providing reconnaissance protection against
  • CThey mitigate against attacks by providing resource protection by limiting the number of sessions
  • DThey mitigate against attacks by utilizing "random early drop".

How the community answered

(27 responses)
  • A
    11% (3)
  • B
    19% (5)
  • C
    70% (19)

Explanation

In addition to flood protection, we also offer resources protection. This type of protection enforces a quota for your hosts. It restricts the maximum number of sessions allowed for a particular source IP address, destination IP address or IP source-destination pair. Zone protection policies allow the use of flood protection and have the ability to protect against port scanning\sweeps and packet based attacks. A few examples are IP spoofing, fragments, overlapping segments, reject tcp-non-syn.

Topics

#DoS Protection Profile#random early drop#session limits#volumetric attacks

Community Discussion

No community discussion yet for this question.

Full PCNSE7 Practice