exam questions

Exam PCNSA All Questions

View all questions & answers for the PCNSA exam

Exam PCNSA topic 1 question 226 discussion

Actual exam question from Palo Alto Networks's PCNSA
Question #: 226
Topic #: 1
[All PCNSA Questions]

An administrator would like to override the default deny action for a given application, and instead would like to block the traffic.
Which security policy action causes this?

  • A. Drop
  • B. Drop, send ICMP Unreachable
  • C. Reset both
  • D. Reset server
Show Suggested Answer Hide Answer
Suggested Answer: A 🗳️

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
markeloff23
Highly Voted 1 year, 3 months ago
Why B and not A?
upvoted 6 times
sguerouate
1 year ago
Agree, i would have said A. This is the most simple way for blocking the "traffic" as they ask...
upvoted 1 times
...
...
Netsan
Most Recent 6 months ago
Selected Answer: A
Drop-Silently drops the traffic; for an application, it overrides the default deny action. https://docs.paloaltonetworks.com/content/techdocs/en_US/pan-os/10-2/pan-os-admin/policy/security-policy/security-policy-actions.html
upvoted 1 times
...
OhEmGee
11 months, 3 weeks ago
Selected Answer: A
The question is not asking for notifying anyone so 'icmp' is not needed as such, thus I select A.
upvoted 3 times
...
J2J2J2J
12 months ago
Selected Answer: A
Answer : A
upvoted 2 times
...
Selected Answer: A
Answer is drop.
upvoted 2 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...