Palo Alto Networks Certified Network Security Engineer (PCNSE) — Question 176

How can packet buffer protection be configured?

Answer options

• A. at zone level to protect firewall resources and ingress zones, but not at the device level
• B. at the interface level to protect firewall resources
• C. at the device level (globally) to protect firewall resources and ingress zones, but not at the zone level
• D. at the device level (globally) and, if enabled globally, at the zone level

Correct answer: D

Explanation

The correct answer is D because packet buffer protection can be configured globally at the device level and, when this global setting is enabled, it can also be applied at the zone level. Option A is incorrect because it suggests protection only at the zone level. Option B is not fully correct as it limits the protection to interface level, and option C incorrectly states that protection cannot be configured at the zone level.