1.2 Configure Zones NEXT-GENERATION-FIREWALL-ENGINEER Practice Questions (Page 5)

Questions 21–21

1. 21application · medium

   A company is deploying a PAN-OS firewall to protect its internal network from external threats. The firewall has a zone named 'Untrust' connected to the internet. The security team is concerned about SYN floods and port scans targeting the firewall's external interface. What should the administrator configure to mitigate these attacks at the zone level?

   • AApply a DoS Protection profile to the 'Untrust' zone that enables SYN flood protection and port scan detection.
   • BApply an Anti-Spyware profile to the 'Untrust' zone that enables SYN flood protection and port scan detection.
   • CApply a Vulnerability Protection profile to the 'Untrust' zone that enables SYN flood protection and port scan detection.
   • DApply a Zone Protection profile to the 'Untrust' zone that enables SYN flood protection and port scan detection.
   Reveal Solution Discussion Select an answer first