Palo Alto Networks Exam PSE-Platform Topic 1 Question 59 Discussion

Actual exam question for Palo Alto Networks's PSE-Platform exam

Question #: 59
Topic #: 1

[All PSE-Platform Questions]

Which profile or policy should be applied to protect against port scans from the internet?

AAn App-ID security policy rule to block traffic sourcing from the untrust zone

BSecurity profiles to security policy rules for traffic sourcing from the untrust zone

CInterface management profile on the zone of the ingress interface

DZone protection profile on the zone of the ingress interface

Show Suggested Answer

Suggested Answer: C, D

by Theola at May 01, 2024, 06:56 AM

Limited Time Offer

25%

Off

Get Premium PSE-Platform Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Suzi

3 hours ago

C) Interface management profile? Really? That's like trying to catch a speeding bullet with a butterfly net. Not the most effective solution, if you ask me.

upvoted 0 times

...

Vallie

5 days ago

A) An App-ID security policy rule? Nah, that's way too complicated. I just want something that's going to block those scans without making me think too hard.

upvoted 0 times

...

Apolonia

8 days ago

D) Zone protection profile on the zone of the ingress interface seems like the obvious choice here. I mean, who doesn't love a good zone profile to protect against those pesky port scans?

upvoted 0 times

...

Latricia

13 days ago

I'm not sure, but I think A) An App-ID security policy rule could also work to block the traffic.

upvoted 0 times

...

Cary

15 days ago

I agree with Janine, using a Zone protection profile makes sense to protect against port scans.

upvoted 0 times

...

Janine

17 days ago

I think the answer is D) Zone protection profile on the zone of the ingress interface.

upvoted 0 times

...

Gaynell

24 days ago

I'm not sure, but I think option B) Security profiles to security policy rules for traffic sourcing from the untrust zone could also work.

upvoted 0 times

...

Becky

25 days ago

I agree with Izetta, using a Zone protection profile can help protect against port scans from the internet.

upvoted 0 times

...

Izetta

1 months ago

I think option D) Zone protection profile on the zone of the ingress interface would be the best choice.

upvoted 0 times

...