A client is concerned about resource exhaustion because of denial-of-service attacks against their DNS servers. Which option will protect the individual servers?

The correct answer is D. Apply a classified DoS Protection Profile.. Explanation/Reference: "Packet Buffer Protection" is indeed an way to protect against resource exhaustion but it is not configured under "DOS Protection Profile". It is directly enabled

Threat Prevention

Question

Options

AEnable packet buffer protection on the Zone Protection Profile.
BApply an Anti-Spyware Profile with DNS sinkholing.
CUse the DNS App-ID with application-default.
DApply a classified DoS Protection Profile.

How the community answered

(26 responses)

A
4% (1)
B
12% (3)
C
8% (2)
D
77% (20)

Explanation

Explanation/Reference: "Packet Buffer Protection" is indeed an way to protect against resource exhaustion but it is not configured under "DOS Protection Profile". It is directly enabled

Topics

#classified DoS Protection Profile#resource exhaustion#DNS protection#per-IP protection

Community Discussion

No community discussion yet for this question.

Full PSE-PLATFORM Practice