Exam PCNSE topic 1 question 507 discussion

Actual exam question from Palo Alto Networks's PCNSE

Question #: 507
Topic #: 1

An engineer receives reports from users that applications are not working and that websites are only partially loading in an asymmetric environment. After investigating, the engineer observes the flow_tcp_non_syn_drop counter increasing in the show counters global output.

Which troubleshooting command should the engineer use to work around this issue?

A. set deviceconfig setting tcp asymmetric-path drop
B. set session tcp-reject-non-syn yes
C. set deviceconfig setting tcp asymmetric-path bypass
D. set deviceconfig setting session tcp-reject-non-syn no

Show Suggested Answer

Suggested Answer: D 🗳️

by samqq at March 17, 2023, 11:55 p.m.

Comments

Submit Cancel

Betty2022

Highly Voted 1 year, 5 months ago

Selected Answer: D

Run the following commands to disable the option permanently: > configure # set deviceconfig setting session tcp-reject-non-syn no # commit ------ B, would be correct if it would be set to NO. Run the following commands to disable TCP reject non-SYN temporarily (until reboot) > set session tcp-reject-non-syn no source:https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClEwCAK

upvoted 5 times

...

Marshpillowz

Most Recent 11 months, 2 weeks ago

Selected Answer: D

D is correct

upvoted 2 times

...

Andromeda1800

1 year, 1 month ago

Selected Answer: D

D is correct.

upvoted 2 times

...

sov4

1 year, 5 months ago

Selected Answer: D

It's D. B is almost correct... but it would be "no" not "yes". In troubleshooting, I would use this option because it's temporary... D would be permanent. However, the only correct option is D. https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClEwCAK

upvoted 2 times

...