Welcome to ExamTopics
ExamTopics Logo
- Expert Verified, Online, Free.

Unlimited Access

Get Unlimited Contributor Access to the all ExamTopics Exams!
Take advantage of PDF Files for 1000+ Exams along with community discussions and pass IT Certification Exams Easily.

Exam PCNSE topic 1 question 49 discussion

Actual exam question from Palo Alto Networks's PCNSE
Question #: 49
Topic #: 1
[All PCNSE Questions]

A client is concerned about resource exhaustion because of denial-of-service attacks against their DNS servers.
Which option will protect the individual servers?

  • A. Enable packet buffer protection on the Zone Protection Profile.
  • B. Apply an Anti-Spyware Profile with DNS sinkholing.
  • C. Use the DNS App-ID with application-default.
  • D. Apply a classified DoS Protection Profile.
Show Suggested Answer Hide Answer
Suggested Answer: D 🗳️

Comments

Chosen Answer:
This is a voting comment (?) , you can switch to a simple comment.
Switch to a voting comment New
Edu147
Highly Voted 4 years, 11 months ago
Correct is D They want to protect just one specific server, if you apply the zone protection you are protecting the entire zone
upvoted 28 times
Chris71Mach1
1 year, 6 months ago
The explanation we all need. Thanks!
upvoted 3 times
...
...
Ripu
Highly Voted 4 years ago
Answer:D
upvoted 5 times
Barry_Allen
3 years, 4 months ago
:D smiling face
upvoted 5 times
...
...
bing2021
Most Recent 3 days, 3 hours ago
Selected Answer: D
for one specific server
upvoted 1 times
...
Marshpillowz
5 months, 2 weeks ago
Selected Answer: D
D is correct
upvoted 1 times
...
[Removed]
1 year ago
Correct is D DOS protection if for resources behind the firewall. Zone Protection is for the firewall.
upvoted 2 times
...
Pochex
1 year, 4 months ago
Answer D is the correct one. Classified profiles protect individual critical resources, especially servers that users access from the internet, and are often attack targets, such as web servers, database servers, and DNS servers. Please refer to https://docs.paloaltonetworks.com/pan-os/10-1/pan-os-admin/zone-protection-and-dos-protection/zone-defense/dos-protection-profiles-and-policy-rules/classified-versus-aggregate-dos-protection
upvoted 1 times
...
yazid0016
1 year, 6 months ago
Correct answer : D
upvoted 1 times
...
yazid0016
1 year, 6 months ago
Correct answer is D
upvoted 1 times
...
Woody
1 year, 6 months ago
https://docs.paloaltonetworks.com/pan-os/9-1/pan-os-admin/zone-protection-and-dos-protection/zone-defense/dos-protection-profiles-and-policy-rules/classified-versus-aggregate-dos-protection#id56c14277-0ecd-4e32-b3d3-7b616176204a D.
upvoted 3 times
...
UFanat
2 years ago
Selected Answer: D
D. Apply a classified DoS Protection Profile.
upvoted 1 times
...
lgkhan
2 years, 7 months ago
Selected Answer: D
D is correct.
upvoted 2 times
...
Kane002
2 years, 7 months ago
Selected Answer: D
D. Single protection is for DoS.
upvoted 3 times
...
zuby76
2 years, 8 months ago
D is the right answer Packet Buffer protection is indeed the way to protect against resource exhaustion, but it is not configured under DoS protection profile. It is directly enabled under Zones.
upvoted 3 times
...
chris_fgt
2 years, 11 months ago
D is the correct answer
upvoted 1 times
...
Zabol
3 years ago
Definitely D is correct
upvoted 1 times
...
YasserSaied
3 years ago
D -- it couldn't be else
upvoted 1 times
...
yogininangpal
3 years, 2 months ago
D is the correct answer, for specific servers not the entire zone so correct answer is not A
upvoted 1 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...
ex Want to SAVE BIG on Certification Exam Prep?
close
ex Unlock All Exams with ExamTopics Pro 75% Off
  • arrow Choose From 1000+ Exams
  • arrow Access to 10 Exams per Month
  • arrow PDF Format Available
  • arrow Inline Discussions
  • arrow No Captcha/Robot Checks
Limited Time Offer
Ends in