Palo Alto Networks Certified Network Security Engineer (PCNSE) — Question 69

Which DoS protection mechanism detects and prevents session exhaustion attacks?

Answer options

• A. Packet Based Attack Protection
• B. Flood Protection
• C. Resource Protection
• D. TCP Port Scan Protection

Correct answer: C

Explanation

Resource Protection is specifically designed to identify and mitigate session exhaustion attacks by managing resources effectively. The other options focus on different types of attacks, such as packet-based threats or flood attacks, which do not directly address session exhaustion.