Palo Alto Networks Certified Network Security Engineer (PCNSE) — Question 559

Which protection feature is available only in a Zone Protection Profile?

Answer options

• A. SYN Flood Protection using SYN Flood Cookies
• B. ICMP Flood Protection
• C. Port Scan Protection
• D. UDP Flood Protections

Correct answer: C

Explanation

The correct answer, C. Port Scan Protection, is a feature specifically designed for Zone Protection Profiles to mitigate port scanning attacks. The other options, while they provide valuable protection, are not limited to Zone Protection Profiles and can be applied in different contexts.