A network security administrator wants to enable Packet-Based Attack Protection in a Zone Protection profile.
What are two valid ways to enable Packet-Based Attack Protection? (Choose two.)
A network security administrator wants to enable Packet-Based Attack Protection in a Zone Protection profile.
What are two valid ways to enable Packet-Based Attack Protection? (Choose two.)
To enable Packet-Based Attack Protection in a Zone Protection profile, valid options include TCP Drop and ICMP Drop. These are specific measures taken to mitigate packet-based attacks by dropping malicious TCP and ICMP packets, effectively preventing such attacks from impacting the network.
A&B: https://docs.paloaltonetworks.com/pan-os/10-1/pan-os-admin/zone-protection-and-dos-protection/zone-defense/zone-protection-profiles/packet-based-attack-protection
AB Network > Network Profiles > Zone Protection > Packet Based Attack Protection You can configure Packet Based Attack protection to drop the following types of packets: IP Drop TCP Drop ICMP Drop IPv6 Drop ICMPv6 Drop
A B are correct
A& B correct
A,B are Packet Based Attack protections C,D are Flood Protection / SYN-Actions
A and B
A, B are correct.