Palo Alto Networks Exam PSE-DataCenter Topic 1 Question 2 Discussion

Actual exam question for Palo Alto Networks's PSE-DataCenter exam

Question #: 2
Topic #: 1

A client has a sensitive application server in their data center and is particularly concerned about resource exhaustion because of distributed denial-of-service attacks.

How can the Palo Alto Networks NGFW be configured to specifically protect this server against resource exhaustion originating from multiple IP addresses (DDoS attack)?

ADefine a custom App-ID to ensure that only legitimate application traffic reaches the server.

BAdd a Vulnerability Protection Profile to block the attack.

CAdd QoS Profiles to throttle incoming requests.

DAdd a DoS Protection Profile with defined session count.

Show Suggested Answer

Suggested Answer: D

by Simona at Jan 12, 2025, 02:18 AM

Limited Time Offer

25%

Off

Get Premium PSE-DataCenter Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Tambra

11 days ago

I'm feeling a little hungry. Maybe the server could use a DDoS (Delicious Donut of Security) Profile instead?

upvoted 0 times

...

Justine

17 days ago

D for sure. Gotta keep those DDoS attackers at bay! Don't want the server to go down in a blaze of glory.

upvoted 0 times

...

Reyes

17 days ago

Hmm, I'm not sure a custom App-ID is necessary for this scenario. Seems like overkill when a DoS Protection Profile could do the job.

upvoted 0 times

Quentin

3 days ago

I think adding a DoS Protection Profile with a defined session count would be the best option.

upvoted 0 times

...

Scarlet

21 days ago

I'm not sure, but I think adding QoS Profiles to throttle incoming requests could also help in protecting the server against resource exhaustion.

upvoted 0 times

...

Viola

25 days ago

I agree with Clorinda, option D with a defined session count would be effective in mitigating DDoS attacks.

upvoted 0 times

...

Troy

26 days ago

C seems like a good idea too. Throttling incoming requests with QoS Profiles could help mitigate the effects of a DDoS attack.

upvoted 0 times

Eden

9 days ago

User 2: C could also work. Throttling incoming requests with QoS Profiles could help mitigate the effects of a DDoS attack.

upvoted 0 times

...

Sommer

16 days ago

User 1: A seems like the best option. Defining a custom App-ID can help ensure only legitimate traffic reaches the server.

upvoted 0 times

...

Clorinda

1 months ago

I think option D is the best choice because it specifically addresses resource exhaustion from multiple IP addresses.

upvoted 0 times

...

Marti

1 months ago

I think option D is the way to go. A DoS Protection Profile with defined session count sounds like the best way to protect against resource exhaustion from a DDoS attack.

upvoted 0 times