exam questions

Exam PCNSA All Questions

View all questions & answers for the PCNSA exam

Exam PCNSA topic 1 question 95 discussion

Actual exam question from Palo Alto Networks's PCNSA
Question #: 95
Topic #: 1
[All PCNSA Questions]

Which action results in the firewall blocking network traffic without notifying the sender?

  • A. Drop
  • B. Deny
  • C. Reset Server
  • D. Reset Client
Show Suggested Answer Hide Answer
Suggested Answer: A 🗳️

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
DilT
Highly Voted 3 years, 1 month ago
I think the correct answer should be "Drop" The difference between deny and drop is that deny will make a router (or other device) send an ICMP type 3 (destination unreachable) message response back, where drop will not notify the sending party that the device has be denied and just silently drop the traffic.
upvoted 17 times
...
samir_maniyar
Most Recent 3 months, 3 weeks ago
Selected Answer: A
without notifying
upvoted 1 times
...
Rivand
4 months ago
Selected Answer: A
Drop is correct
upvoted 1 times
...
[Removed]
10 months, 3 weeks ago
Answer is A https://docs.paloaltonetworks.com/pan-os/9-1/pan-os-admin/policy/security-policy/security-policy-actions Drop Silently drops the traffic; for an application, it overrides the default deny action. A TCP reset is not sent to the host/application. It can't be Reset-Server as it is only after a session has been established.
upvoted 1 times
...
Selected Answer: A
Its drop
upvoted 1 times
...
Selected Answer: A
A drop just literally drops the packet.
upvoted 1 times
...
daytonadave2011
1 year ago
Selected Answer: A
Drop is silent.
upvoted 1 times
...
nuWat
1 year, 3 months ago
Selected Answer: A
For the reasons others have specified!!
upvoted 1 times
...
Hyay
1 year, 4 months ago
Selected Answer: A
That's what drop does
upvoted 1 times
...
KhalidB
1 year, 10 months ago
Drop a is correct
upvoted 1 times
...
ppower
2 years, 12 months ago
Though A.Drop would be my first choice here because traffic simply discarded without notifying the sender, option "Reset Server" notifies only Server side to close the socket meanwhile Client in unaware of the action.
upvoted 3 times
...
nunesduck
3 years ago
Drop is correct answer https://live.paloaltonetworks.com/t5/general-topics/to-drop-or-deny/m-p/206900#M60682
upvoted 2 times
...
atifikhan
3 years ago
A is correct answer
upvoted 3 times
...
nabilzay
3 years, 1 month ago
Answer should be A
upvoted 4 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago