Which DoS Protection Profile detects and prevents session exhaustion attacks against specific destinations?

Which DoS Protection Profile detects and prevents session exhaustion attacks against specific destinations?
A . Resource Protection
B. TCP Port Scan Protection
C. Packet Based Attack Protection
D. Packet Buffer Protection

View Answer

Answer: A

Explanation:

According to the documentation, resource protection detects and prevents session exhaustion attacks against specific destinations. This type of attack uses a large number of hosts to establish as many fully established sessions as possible to consume all of a system’s resources. Resource protection defines the maximum number of concurrent connections for a destination IP address or zone. References: 1 Security Profile: DoS Protection Profile – Palo Alto Networks

https://docs.paloaltonetworks.com/network-security/security-policy/security-profiles/security-profile-dos-protection-profile