exam questions

Exam PCNSE All Questions

View all questions & answers for the PCNSE exam

Exam PCNSE topic 1 question 382 discussion

Actual exam question from Palo Alto Networks's PCNSE
Question #: 382
Topic #: 1
[All PCNSE Questions]

A firewall administrator is investigating high packet buffer utilization in the company firewall. After looking at the threat logs and seeing many flood attacks coming from a single source that are dropped by the firewall, the administrator decides to enable packet buffer protection to protect against similar attacks.
The administrator enables packet buffer protection globally in the firewall but still sees a high packet buffer utilization rate.
What else should the administrator do to stop packet buffers from being overflowed?

  • A. Apply DOS profile to security rules allow traffic from outside.
  • B. Enable packet buffer protection for the affected zones.
  • C. Add the default Vulnerability Protection profile to all security rules that allow traffic from outside.
  • D. Add a Zone Protection profile to the affected zones
Show Suggested Answer Hide Answer
Suggested Answer: B 🗳️

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Marshpillowz
4 months, 3 weeks ago
Selected Answer: B
B is correct
upvoted 1 times
...
Metgatz
6 months ago
Selected Answer: B
B Globally and then on the security zone
upvoted 1 times
...
Betty2022
11 months ago
Selected Answer: B
Agree,B
upvoted 1 times
...
confusion
1 year, 7 months ago
Selected Answer: B
B First globally then on the zone.
upvoted 2 times
...
TAKUM1y
1 year, 7 months ago
Selected Answer: B
https://docs.paloaltonetworks.com/pan-os/10-2/pan-os-admin/zone-protection-and-dos-protection/zone-defense/packet-buffer-protection
upvoted 1 times
...
happyism
1 year, 8 months ago
B is correct; you must enable Packet Buffer Globally before you can enabled it per zone for a second level of protection You Configure Packet Buffer Protection globally to protect the entire firewall and also enable Packet Buffer Protection on each zone to protect zones
upvoted 2 times
...
mysteryzjoker
1 year, 9 months ago
Selected Answer: B
https://docs.paloaltonetworks.com/pan-os/9-1/pan-os-admin/zone-protection-and-dos-protection/zone-defense/packet-buffer-protection
upvoted 2 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago