I think the correct answer should be "Drop"
The difference between deny and drop is that deny will make a router (or other device) send an ICMP type 3 (destination unreachable) message response back, where drop will not notify the sending party that the device has be denied and just silently drop the traffic.
Answer is A
https://docs.paloaltonetworks.com/pan-os/9-1/pan-os-admin/policy/security-policy/security-policy-actions
Drop
Silently drops the traffic; for an application, it overrides the default deny action. A TCP reset is not sent to the host/application.
It can't be Reset-Server as it is only after a session has been established.
Though A.Drop would be my first choice here because traffic simply discarded without notifying the sender, option "Reset Server" notifies only Server side to close the socket meanwhile Client in unaware of the action.
This section is not available anymore. Please use the main Exam Page.PCNSA Exam Questions
Log in to ExamTopics
Sign in:
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
DilT
Highly Voted 3 years, 5 months agosamir_maniyar
Most Recent 7 months, 3 weeks agoRivand
7 months, 3 weeks ago[Removed]
1 year, 2 months agoblahblah1234567890000
1 year, 3 months agoblahblah1234567890000
1 year, 4 months agodaytonadave2011
1 year, 4 months agonuWat
1 year, 7 months agoHyay
1 year, 7 months agoKhalidB
2 years, 2 months agoppower
3 years, 3 months agonunesduck
3 years, 4 months agoatifikhan
3 years, 4 months agonabilzay
3 years, 5 months ago