exam questions

Exam PCNSA All Questions

View all questions & answers for the PCNSA exam

Exam PCNSA topic 1 question 143 discussion

Actual exam question from Palo Alto Networks's PCNSA
Question #: 143
Topic #: 1
[All PCNSA Questions]

An administrator would like to use App-ID's deny action for an application and would like that action updated with dynamic updates as new content becomes available.
Which security policy action causes this?

  • A. Reset server
  • B. Reset both
  • C. Deny
  • D. Drop
Show Suggested Answer Hide Answer
Suggested Answer: C 🗳️

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
error_909
Highly Voted 1 year, 4 months ago
Selected Answer: C
For clarification: each app has its own defualt deny-action listed in the database. If the deny option is selected in the policy rue, then this default action will be used. Answer C is correct
upvoted 8 times
...
mr_flubber
Highly Voted 2 months, 2 weeks ago
Simple answer, confusing question..
upvoted 5 times
...
sabaheta
Most Recent 1 year, 8 months ago
C is correct answer. A drop is silent, you simply discard the packet and don't tell anyone about it. This is great for most siatuations as you don't generate more traffic on your network and outsiders who may potentially be scanning you are non the wiser. A deny sends a notification to the sender that something happened and their packet was rejected
upvoted 2 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago