Palo Alto Networks Certified Network Security Administrator (PCNSA) — Question 111

Which Security Profile can provide protection against ICMP floods, based on individual combinations of a packet's source and destination IP addresses?

Answer options

• A. DoS protection
• B. URL filtering
• C. packet buffering
• D. anti-spyware

Correct answer: A

Explanation

The correct answer is A, DoS protection, as it is specifically designed to mitigate Denial of Service attacks, including ICMP floods, by examining the characteristics of network packets. The other options, such as URL filtering, packet buffering, and anti-spyware, do not directly address the prevention of ICMP flood attacks.