ExamTopics Logo
Mail Us[email protected]
Menu
Palo-Alto-Networks Discussions
exam questions

Exam PCNSE All Questions

View all questions & answers for the PCNSE exam
Go to Exam

Exam PCNSE topic 1 question 507 discussion

Actual exam question from Palo Alto Networks's PCNSE
Question #: 507
Topic #: 1
[All PCNSE Questions]

An engineer receives reports from users that applications are not working and that websites are only partially loading in an asymmetric environment. After investigating, the engineer observes the flow_tcp_non_syn_drop counter increasing in the show counters global output.

Which troubleshooting command should the engineer use to work around this issue?

  • A. set deviceconfig setting tcp asymmetric-path drop
  • B. set session tcp-reject-non-syn yes
  • C. set deviceconfig setting tcp asymmetric-path bypass
  • D. set deviceconfig setting session tcp-reject-non-syn no
Show Suggested Answer Hide Answer
Suggested Answer: D 🗳️
by samqq at March 17, 2023, 11:55 p.m.

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Submit Cancel
Betty2022
Highly Voted 1 year, 3 months ago
Selected Answer: D
Run the following commands to disable the option permanently: > configure # set deviceconfig setting session tcp-reject-non-syn no # commit ------ B, would be correct if it would be set to NO. Run the following commands to disable TCP reject non-SYN temporarily (until reboot) > set session tcp-reject-non-syn no source:https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClEwCAK
upvoted 5 times
...
Marshpillowz
Most Recent 9 months ago
Selected Answer: D
D is correct
upvoted 2 times
...
Andromeda1800
10 months, 3 weeks ago
Selected Answer: D
D is correct.
upvoted 2 times
...
sov4
1 year, 3 months ago
Selected Answer: D
It's D. B is almost correct... but it would be "no" not "yes". In troubleshooting, I would use this option because it's temporary... D would be permanent. However, the only correct option is D. https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClEwCAK
upvoted 2 times
...
kinho1985
1 year, 4 months ago
B. set session tcp-reject-non-syn yes
upvoted 1 times
sov4
1 year, 3 months ago
If B was set session tcp-reject-non-syn no this would be correct. Since it's "yes" it's not correct. D is the only correct answer.
upvoted 1 times
...
...
daytonadave2011
1 year, 7 months ago
Selected Answer: D
Answer is D. Refer to samqq's link.
upvoted 3 times
...
kewokil120
1 year, 7 months ago
Selected Answer: D
Answer is d. a makes no sense at all
upvoted 2 times
...
samqq
1 year, 7 months ago
Selected Answer: D
https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClEwCAK
upvoted 2 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago