Palo Alto Networks Certified Network Security Engineer (PCNSE) — Question 144
To protect your firewall and network from single source denial of service (DoS) attacks that can overwhelm its packet buffer and cause legitimate traffic to drop, you can configure:
Answer options
- A. PBP (Protocol Based Protection)
- B. BGP (Border Gateway Protocol)
- C. PGP (Packet Gateway Protocol)
- D. PBP (Packet Buffer Protection)
Correct answer: D
Explanation
The correct answer is D, PBP (Packet Buffer Protection), which specifically addresses the issue of protecting the packet buffer from overwhelming traffic. Options A and C refer to different types of protection that do not directly relate to packet buffer issues, while B, BGP (Border Gateway Protocol), is a routing protocol that does not provide DoS attack protection.