Palo_Alto_Networks
PSE-STRATA · Question #92
Which profile or policy should be applied to protect against port scans from the internet?
The correct answer is D. Zone protection profile on the zone of the ingress interface. See the full explanation below for the reasoning.
Question
Which profile or policy should be applied to protect against port scans from the internet?
Options
- AAn App-ID security policy rule to block traffic sourcing from the untrust zone
- BSecurity profiles to security policy rules for traffic sourcing from the untrust zone
- CInterface management profile on the zone of the ingress interface
- DZone protection profile on the zone of the ingress interface
How the community answered
(40 responses)- A10% (4)
- B5% (2)
- C3% (1)
- D83% (33)
Community Discussion
No community discussion yet for this question.