exam questions

Exam PCNSE All Questions

View all questions & answers for the PCNSE exam

Exam PCNSE topic 1 question 147 discussion

Actual exam question from Palo Alto Networks's PCNSE
Question #: 147
Topic #: 1
[All PCNSE Questions]

An administrator is defining protection settings on the Palo Alto Networks NGFW to guard against resource exhaustion. When platform utilization is considered, which steps must the administrator take to configure and apply packet buffer protection?

  • A. Enable and configure the Packet Buffer Protection thresholds. Enable Packet Buffer Protection per ingress zone.
  • B. Enable and then configure Packet Buffer thresholds. Enable Interface Buffer protection.
  • C. Create and Apply Zone Protection Profiles in all ingress zones. Enable Packet Buffer Protection per ingress zone.
  • D. Configure and apply Zone Protection Profiles for all egress zones. Enable Packet Buffer Protection per egress zone.
  • E. Enable per-vsys Session Threshold alerts and triggers for Packet Buffer Limits. Enable Zone Buffer Protection per zone.
Show Suggested Answer Hide Answer
Suggested Answer: A 🗳️

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
bmarks
Highly Voted 3 years, 4 months ago
Answer = A The following excerpts from 9.1 Docs confirm the answer: ... Packet Buffer Protection defends ingress zones. ... you don’t configure Packet Buffer Protection in a Zone Protection profile ... tune the Packet Buffer Protection thresholds https://docs.paloaltonetworks.com/pan-os/9-1/pan-os-admin/zone-protection-and-dos-protection/zone-defense/packet-buffer-protection.html
upvoted 5 times
...
Marshpillowz
Most Recent 5 months ago
Selected Answer: A
Answer is A
upvoted 1 times
...
lol12
1 year, 8 months ago
Selected Answer: A
A https://docs.paloaltonetworks.com/pan-os/10-2/pan-os-admin/zone-protection-and-dos-protection/configure-zone-protection-to-increase-network-security/configure-packet-buffer-protection
upvoted 3 times
...
TAKUM1y
1 year, 8 months ago
Selected Answer: A
https://live.paloaltonetworks.com/t5/%E5%85%AC%E5%85%B1%E5%B8%82%E5%A0%B4%E5%90%91%E3%81%91%E6%83%85%E5%A0%B1/%E6%98%A8%E4%BB%8A%E3%81%AEdos%E6%94%BB%E6%92%83%E3%81%AE%E5%82%BE%E5%90%91%E3%81%A8pa%E3%82%B7%E3%83%AA%E3%83%BC%E3%82%BA%E3%81%AEdos%E9%98%B2%E5%BE%A1%E6%A9%9F%E8%83%BD%E3%81%AE%E4%BD%BF%E3%81%84%E6%96%B9/ta-p/407688
upvoted 3 times
...
nicolasjiang
3 years, 11 months ago
correct a https://docs.paloaltonetworks.com/pan-os/8-1/pan-os-admin/zone-protection-and-dos-protection/configure-zone-protection-to-increase-network-security/configure-packet-buffer-protection
upvoted 3 times
...
rammsdoct
4 years ago
A: https://docs.paloaltonetworks.com/pan-os/8-1/pan-os-admin/zone-protection-and-dos-protection/configure-zone-protection-to-increase-network-security/configure-packet-buffer-protection
upvoted 4 times
...
Ab121213
4 years, 1 month ago
Sounds like D to me : Same web link : Enable packet buffer protection on an ingress zone. Select Network Zones . Choose an ingress zone and click on its name. Select the Enable Packet Buffer Protection check box in the Zone Protection section. Click OK .
upvoted 1 times
jpm_1506
3 years, 6 months ago
"A" is correct. you dont need a ZPF at all to have buffer protection enabled on a zone. and will be per zone on ingress as per life of a packet.
upvoted 3 times
...
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago