Exam PCNSE All QuestionsBrowse all questions from this exam
Go to Exam
Question 60

Which protection feature is available only in a Zone Protection Profile?

    Correct Answer: C

    Port Scan Protection is a feature that is unique to Zone Protection Profiles. These profiles are specifically designed to protect an entire network zone by providing measures against reconnaissance activities such as port scanning, which attempts to identify open ports on a network. Unlike other types of protection like SYN Flood Protection, ICMP Flood Protection, or UDP Flood Protections that might be available in other security profiles, Port Scan Protection is exclusive to Zone Protection Profiles.

Discussion
tester12Option: C

Answer seems like is C

MelloOption: C

The Correct answer is C https://docs.paloaltonetworks.com/pan-os/7-1/pan-os-web-interface-help/network/network-network-profiles-zone-protection.html

BreyargOption: C

Done this a million times... def C!

mzzzzzOption: C

Correct C: SYN Flood Cookies is also available on DoS Protection Profile, the answer refers to ONLY. DoS Protection profiles protect specific devices (classified profiles) and groups of devices (aggregate profiles) against SYN, UDP, ICMP, ICMPv6, and Other IP flood attacks.

PretorianOption: C

I agree with C, however, why not "A"? Flood protection - SYN cookies is a protection that is only in the Zone Protection

secdaddy

Also available via DoS classified so not only Zone Protection

duckduckgooo

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000CljjCAC

QintaoOption: C

definitely C

KAAKOption: C

Correct: C

ChiaPet75Option: C

Correct: C Reconnaissance Protection includes: TCP Port Scan UDP Port Scan Host Sweep

asmaamOption: C

Correct ans = C

khalmrjOption: C

correct C

MarshpillowzOption: C

Correct answer is C

UFanatOption: C

C. Port Scan Protection

shaneOption: C

correct C

SarbiOption: C

Anser c

lol1000Option: C

Answer c https://docs.paloaltonetworks.com/pan-os/10-0/pan-os-web-interface-help/network/network-network-profiles/network-network-profiles-zone-protection/reconnaissance-protection.html#ida0512c75-ed54-4b31-8d2c-9f459466d4d2

UmaShankarOption: C

Correct answer is c

kerberos

Zone Protection Profiles defend the zone at the ingress zone edge against reconnaissance port scan and host sweep attacks, IP packet-based attacks, non-IP protocol attacks, and flood attacks by limiting the number of connections per second (CPS) of different packet types.