Exam PCNSE All QuestionsBrowse all questions from this exam
Question 165

To protect your firewall and network from single source denial of service (DoS) attacks that can overwhelm its packet buffer and cause legitimate traffic to drop, you can configure:

    Correct Answer: D

    To protect your firewall and network from single-source denial-of-service (DoS) attacks that can overwhelm its packet buffer and cause legitimate traffic to drop, configuring Packet Buffer Protection (PBP) is the appropriate measure. Packet Buffer Protection is specifically designed to defend against such attacks by safeguarding the firewall’s packet buffer.

Discussion
rubberbudgieOption: D

Correct D - https://docs.paloaltonetworks.com/pan-os/10-0/pan-os-admin/zone-protection-and-dos-protection/zone-defense/packet-buffer-protection.html

pajonkOption: D

Correct D

GilmarcioOption: D

Correct "D" - https://docs.paloaltonetworks.com/pan-os/10-0/pan-os-admin/zone-protection-and-dos-protection/zone-defense/packet-buffer-protection.html

lol12Option: D

D https://docs.paloaltonetworks.com/pan-os/10-2/pan-os-admin/zone-protection-and-dos-protection/zone-defense/packet-buffer-protection Packet Buffer Protection defends your firewall and network from single session DoS attacks that can overwhelm the firewall’s packet buffer and cause legitimate traffic to drop. Although you don’t configure Packet Buffer Protection in a Zone Protection profile or in a DoS Protection profile or policy rule, Packet Buffer Protection defends ingress zones. While zone and DoS protection apply to new sessions (connections) and are granular, Packet Buffer Protection applies to existing sessions and is global.

UFanatOption: D

Packet Buffer Protection (part of Zone Protection)

MarshpillowzOption: D

D is correct