Exam PCNSA All QuestionsBrowse all questions from this exam
Question 345

Which two Security profile actions can only be applied to DoS Protection profiles? (Choose two.)

    Correct Answer: C, D

    The two actions that can only be applied to DoS Protection profiles are SYN cookies and Random Early Drop. SYN cookies help in mitigating SYN flood attacks by ensuring TCP connections are properly established before resources are committed. Random Early Drop randomly drops packets before the queue is full to prevent congestion, which is particularly useful in mitigating DoS attacks. These actions are specifically designed to counter DoS attacks, whereas Reset-server and Reset-both are general actions that can be applied in other security profiles.

Discussion
DarudeOptions: CD

C,D verified on our firewall

IE17Options: CD

verified in FW

KalenderOptions: CD

https://docs.paloaltonetworks.com/pan-os/9-1/pan-os-admin/zone-protection-and-dos-protection/dos-protection-against-flooding-of-new-sessions/configure-dos-protection-against-flooding-of-new-sessions step2 nummer4

ilikeyouOptions: CD

SYN Cookies and Random Early Drop