Welcome to ExamTopics
ExamTopics Logo
- Expert Verified, Online, Free.
exam questions

Exam PCNSE All Questions

View all questions & answers for the PCNSE exam

Exam PCNSE topic 1 question 241 discussion

Actual exam question from Palo Alto Networks's PCNSE
Question #: 241
Topic #: 1
[All PCNSE Questions]

How can packet buffer protection be configured?

  • A. at zone level to protect firewall resources and ingress zones, but not at the device level
  • B. at the interface level to protect firewall resources
  • C. at the device level (globally) to protect firewall resources and ingress zones, but not at the zone level
  • D. at the device level (globally) and, if enabled globally, at the zone level
Show Suggested Answer Hide Answer
Suggested Answer: D 🗳️

Comments

Chosen Answer:
This is a voting comment (?) , you can switch to a simple comment.
Switch to a voting comment New
Marcyy
Highly Voted 2 years, 11 months ago
D is correct. You can configure Packet Buffer Protection at two levels: the device level (global) and if enabled globally, you can also enable it at the zone level https://docs.paloaltonetworks.com/pan-os/10-1/pan-os-admin/zone-protection-and-dos-protection/configure-zone-protection-to-increase-network-security/configure-packet-buffer-protection.html
upvoted 12 times
...
procheeseburger
Most Recent 1 year, 5 months ago
This is a practice Question, wont be on the test.
upvoted 1 times
...
TAKUM1y
2 years ago
Selected Answer: D
https://docs.paloaltonetworks.com/pan-os/10-2/pan-os-admin/zone-protection-and-dos-protection/zone-defense/packet-buffer-protection
upvoted 2 times
...
TAKUM1y
2 years, 1 month ago
Selected Answer: D
https://docs.paloaltonetworks.com/pan-os/10-2/pan-os-admin/zone-protection-and-dos-protection/configure-zone-protection-to-increase-network-security/configure-packet-buffer-protection "You can configure Packet Buffer Protection at two levels: the device level (global) and if enabled globally, you can also enable it at the zone level."
upvoted 2 times
...
UFanat
2 years, 5 months ago
Selected Answer: D
D according to: https://docs.paloaltonetworks.com/pan-os/10-2/pan-os-admin/zone-protection-and-dos-protection/configure-zone-protection-to-increase-network-security/configure-packet-buffer-protection You can configure Packet Buffer Protection at two levels: the device level (global) and if enabled globally, you can also enable it at the zone level. Global packet buffer protection (Device->Setup->Session) is to protect firewall resources and ensure that malicious traffic does not cause the firewall to become non-responsive. Packet buffer protection per ingress zone (Network->Zones) is a second layer of protection that starts blocking the offending IP address if it continues to exceed the packet buffer protection thresholds. The most effective way to block DoS attacks against a service behind the firewall is to configure packet buffer protection globally and per ingress zone. You can Enable Packet Buffer Protection for a zone, but it is not active until you enable packet buffer protection globally and specify the settings.
upvoted 4 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...