Palo_Alto_Networks
PSE-STRATA · Question #43
Which profile or policy should be applied to protect against port scans from the internet?
The correct answer is B. Zone protection profile on the zone of the ingress interface. https://docs.paloaltonetworks.com/pan-os/8-1/pan-os-web-interface-help/network/network- network-profiles-zone-protection/reconnaissance-protection.html
Network Security and Threat Prevention
Question
Which profile or policy should be applied to protect against port scans from the internet?
Options
- AAn App-ID security policy rule to block traffic sourcing from the untrust zone
- BZone protection profile on the zone of the ingress interface
- CSecurity profiles to security policy rules for traffic sourcing from the untrust zone
- DInterface management profile on the zone of the ingress interface
How the community answered
(50 responses)- A6% (3)
- B82% (41)
- C2% (1)
- D10% (5)
Explanation
https://docs.paloaltonetworks.com/pan-os/8-1/pan-os-web-interface-help/network/network- network-profiles-zone-protection/reconnaissance-protection.html
Topics
#Zone Protection Profile#port scan#DoS protection#ingress zone
Community Discussion
No community discussion yet for this question.