exam questions

Exam PCNSE All Questions

View all questions & answers for the PCNSE exam

Exam PCNSE topic 1 question 338 discussion

Actual exam question from Palo Alto Networks's PCNSE
Question #: 338
Topic #: 1
[All PCNSE Questions]

A firewall administrator notices that many Host Sweep scan attacks are being allowed through the firewall sourced from the outside zone.
What should the firewall administrator do to mitigate this type of attack?

  • A. Create a Zone Protection profile, enable reconnaissance protection, set action to Block, and apply it to the outside zone.
  • B. Create a DOS Protection profile with SYN Flood protection enabled and apply it to all rules allowing traffic from the outside zone.
  • C. Enable packet buffer protection in the outside zone.
  • D. Create a Security rule to deny all ICMP traffic from the outside zone.
Show Suggested Answer Hide Answer
Suggested Answer: A 🗳️

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
confusion
2 months ago
Selected Answer: A
A Addition to links from TAKUM1y and mizuno92: https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA14u000000HBioCAG&lang=en_US%E2%80%A9
upvoted 1 times
...
TAKUM1y
2 months ago
Selected Answer: A
https://docs.paloaltonetworks.com/pan-os/10-2/pan-os-admin/zone-protection-and-dos-protection/configure-zone-protection-to-increase-network-security/configure-reconnaissance-protection
upvoted 2 times
...
mizuno92
3 months ago
Selected Answer: A
https://docs.paloaltonetworks.com/pan-os/9-1/pan-os-admin/zone-protection-and-dos-protection/configure-zone-protection-to-increase-network-security/configure-reconnaissance-protection#idf776c030-fe69-463b-9fdc-aa21520fdfd0
upvoted 2 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago