A client is concerned about resource exhaustion because of denial-of-service attacks against their DNS servers.
Which option will protect the individual servers?

A. Enable packet buffer protection on the Zone Protection Profile.

B. Apply an Anti-Spyware Profile with DNS sinkholing.

C. Use the DNS App-ID with application-default.

D. Apply a classified DoS Protection Profile.








 

Suggested Answer: D



This question is in PCNSE Palo Alto Networks Certified Network Security Engineer Exam
For getting Palo Alto Networks Certified Network Security Engineer (PCNSE) Certificate



Disclaimers:
The website is not related to, affiliated with, endorsed or authorized by Palo Alto Networks.
Trademarks, certification & product names are used for reference only and belong to Palo Alto Networks.
The website does not contain actual questions and answers from Palo Alto Networks's Certification Exams.