Palo Alto Networks Certified Network Security Engineer (PCNSE) — Question 49

An administrator is defining protection settings on the Palo Alto Networks NGFW to guard against resource exhaustion. When platform utilization is considered, which steps must the administrator take to configure and apply packet buffer protection?

Answer options

• A. Enable and configure the Packet Buffer Protection thresholds. Enable Packet Buffer Protection per ingress zone.
• B. Enable and then configure Packet Buffer thresholds. Enable Interface Buffer protection.
• C. Create and Apply Zone Protection Profiles in all ingress zones. Enable Packet Buffer Protection per ingress zone.
• D. Configure and apply Zone Protection Profiles for all egress zones. Enable Packet Buffer Protection per egress zone.
• E. Enable per-vsys Session Threshold alerts and triggers for Packet Buffer Limits. Enable Zone Buffer Protection per zone.

Correct answer: A

Explanation

The correct answer is A because it specifies enabling and configuring the thresholds for Packet Buffer Protection and applying it specifically to ingress zones, which is essential for protecting against resource exhaustion. Options B and D focus on interface or egress zones, which do not address the requirement for ingress zones. Option C, while mentioning ingress zones, does not prioritize the configuration of the Packet Buffer Protection thresholds specifically.