Palo Alto Networks System Engineer – Strata — Question 79

Which action will protect against port scans from the internet?

Answer options

• A. Assign an Interface Management profile to the zone of the ingress interface
• B. Assign Security profiles to Security policy rules for traffic sourcing from the untrust zone
• C. Apply a Zone Protection profile on the zone of the ingress interface
• D. Apply App-ID Security policy rules to block traffic sourcing from the untrust zone

Correct answer: C

Explanation

Applying a Zone Protection profile on the zone of the ingress interface is effective in mitigating port scans by providing mechanisms to detect and prevent such scanning attempts. The other options focus on different aspects of security, such as managing interface profiles or blocking specific traffic, but do not specifically address the protection against port scanning.