A network engineer observes a pattern of anomalous traffic hitting an external-facing zone, including a...

Basic Concept: Packet-Based Attack Protection in a Zone Protection profile handles malformed packet attacks such as non-SYN TCP floods and ICMP fragments, while flood and reconnaissance sections handle rate and scan behavior.

Why D is Correct: Packet-Based Attack Protection is correct because the examples are packet-structure/evasion issues, not application protocol decoding or discovery scans.

Why A is Wrong: Protocol Protection is a Zone Protection category, but it protects a different attack family than the packet-level or flood/reconnaissance behavior described.

Why B is Wrong: Flood Protection is a Zone Protection category, but it protects a different attack family than the packet-level or flood/reconnaissance behavior described.

Why C is Wrong: Reconnaissance Protection is a Zone Protection category, but it protects a different attack family than the packet-level or flood/reconnaissance behavior described.