Palo Alto Networks Certified Network Security Engineer (PCNSE) — Question 328
The profile is configured to provide granular defense against targeted flood attacks for specific critical systems that are accessed by users from the internet.
Which profile is the engineer configuring?
Answer options
- A. Vulnerability Protection
- B. DoS Protection
- C. Packet Buffer Protection
- D. Zone Protection
Correct answer: B
Explanation
The correct answer is B, DoS Protection, as it is specifically designed to mitigate denial-of-service attacks, including flood attacks targeting critical systems. The other options, while related to security, do not primarily focus on protecting against flood attacks; for instance, Vulnerability Protection targets known vulnerabilities, Packet Buffer Protection manages data flow, and Zone Protection provides overall security for network zones.