PCNSE7 · Question #31
A Palo Alto Networks firewall is being targeted by an NTP Amplification attack and is being flooded with tens thousands of bogus UDP connections per second to a single destination IP address and…
The correct answer is D. Classified DoS Protection Policy using destination IP only with a Protect action. Step 1: Configure a DoS Protection profile for flood protection. 1. Select Objects > Security Profiles > DoS Protection and Add a profile Name. 2. Select Classified as the Type. 3. For Flood Protection, select the check boxes for all of the following types of flood protection…
Question
A Palo Alto Networks firewall is being targeted by an NTP Amplification attack and is being flooded with tens thousands of bogus UDP connections per second to a single destination IP address and post. Which option when enabled with the correction threshold would mitigate this attack without dropping legitirnate traffic to other hosts insides the network?
Options
- AZone Protection Policy with UDP Flood Protection
- BQoS Policy to throttle traffic below maximum limit
- CSecurity Policy rule to deny trafic to the IP address and port that is under attack
- DClassified DoS Protection Policy using destination IP only with a Protect action
How the community answered
(40 responses)- A13% (5)
- B5% (2)
- C3% (1)
- D80% (32)
Explanation
Step 1: Configure a DoS Protection profile for flood protection. 1. Select Objects > Security Profiles > DoS Protection and Add a profile Name. 2. Select Classified as the Type. 3. For Flood Protection, select the check boxes for all of the following types of flood protection: Step 2: Configure a DoS Protection policy rule that specifies the criteria for matching the incoming This step include: (Optional) For Destination Address, select Any or enter the IP address of the device you want to protect. protection-against-flooding-of-new-sessions
Topics
Community Discussion
No community discussion yet for this question.