Palo Alto Networks PSE-DataCenter Exam - Topic 1 Question 19 Discussion

Actual exam question for Palo Alto Networks's PSE-DataCenter exam

Question #: 19
Topic #: 1

A client has a sensitive application server in their data center and is particularly concerned about session flooding because of denial of-service attacks.

How can the Palo Alto Networks NGFW be configured to specifically protect this server against session floods originating from a single IP address?

ADefine a custom App-ID to ensure that only legitimate application traffic reaches the server

BAdd QoS Profiles to throttle incoming requests

CAdd a tuned DoS Protection Profile

DAdd an Anti-Spyware Profile to block attacking IP address

Show Suggested Answer

Suggested Answer: C

by Socorro at Jan 05, 2026, 05:16 AM

Limited Time Offer

25%

Off

Get Premium PSE-DataCenter Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Cornell

4 days ago

I hope the exam doesn't have any trick questions like "What's the best way to protect a server from a session flood? A) Unplug it."

upvoted 0 times

...

Larue

9 days ago

D) Add an Anti-Spyware Profile is not the right solution here. That's for blocking malware, not session floods.

upvoted 0 times

...

Nieves

30 days ago

B) Add QoS Profiles could work, but it's a more general solution. C) is the most targeted approach.

upvoted 0 times

...

Ronny

1 month ago

A) Define a custom App-ID is a good idea, but it won't directly address the session flooding issue.

upvoted 0 times

...

Tasia

1 month ago

C) Add a tuned DoS Protection Profile is the correct answer. This will specifically protect the server against session floods.

upvoted 0 times

...

Lilli

2 months ago

I vaguely recall that Anti-Spyware Profiles are more for malware detection, not really for session flood protection. So I think that one might not be the best choice here.

upvoted 0 times

...

Patrick

2 months ago

I’m leaning towards option C, but I wonder if defining a custom App-ID could also play a role in filtering out unwanted traffic.

upvoted 0 times

...

Quentin

2 months ago

I feel like we practiced a similar question where we had to choose between QoS and DoS profiles. QoS seemed more about bandwidth management, right?

upvoted 0 times

...

Arthur

2 months ago

I think I remember that a DoS Protection Profile can help mitigate session floods, but I'm not entirely sure how to tune it specifically for a single IP.

upvoted 0 times

...

Amina

2 months ago

I feel pretty confident that option C is the way to go here. Protecting against denial-of-service attacks is critical, and the DoS Protection Profile seems like the right tool for the job.

upvoted 0 times

...

Merilyn

2 months ago

Option C sounds like the most direct way to address the session flooding issue. I'll focus on understanding how to properly configure the DoS Protection Profile.

upvoted 0 times

...