The profile is configured to provide granular defense against targeted flood attacks for specific critical systems that are accessed by users from the internet.
Which profile is the engineer configuring?
The profile is configured to provide granular defense against targeted flood attacks for specific critical systems that are accessed by users from the internet.
Which profile is the engineer configuring?
The engineer is configuring a DoS (Denial of Service) Protection profile. DoS Protection profiles are specifically designed to provide granular defense against targeted flood attacks for critical systems, especially those accessed by users from the internet. Unlike Zone Protection profiles that protect entire zones, DoS Protection profiles focus on individual or specific groups of critical resources, making them the appropriate choice for the scenario described.
Verbiage matches exactly to a KB: https://docs.paloaltonetworks.com/pan-os/10-2/pan-os-admin/zone-protection-and-dos-protection/zone-defense/dos-protection-profiles-and-policy-rules
B: (DDoS) the ask was to protect a specific critical system D( Zone ) Yes, it offers flood protection but for the Zone DDoS: Configure a DoS Protection profile for flood protection For Flood Protection, select all types of flood protection: SYN Flood UDP Flood ICMP Flood ICMPv6 Flood Other IP Flood ------ A Zone Protection profile with flood protection configured defends an entire ingress zone against SYN, ICMP, ICMPv6, UDP, and other IP flood attacks
I think its B because it's for a specific system https://docs.paloaltonetworks.com/pan-os/10-2/pan-os-admin/zone-protection-and-dos-protection/zone-defense/dos-protection-profiles-and-policy-rules. DoS Protection profiles and DoS Protection policy rules combine to protect specific groups of critical resources and individual critical resources against session floods. Compared to Zone Protection profiles, which protect entire zones from flood attacks, DoS protection provides granular defense for specific systems, especially critical systems that users access from the internet and are often attack targets, such as web servers and database servers.
Should be D https://docs.paloaltonetworks.com/pan-os/9-1/pan-os-web-interface-help/network/network-network-profiles/network-network-profiles-zone-protection/flood-protection
B is correct
DoS Protection profiles and DoS Protection policy rules combine to protect specific groups of critical resources and individual critical resources against session floods. Compared to Zone Protection profiles, which protect entire zones from flood attacks, DoS protection provides granular defense for specific systems, especially critical systems that users access from the internet and are often attack targets, such as web servers and database servers