Exam PCNSA All QuestionsBrowse all questions from this exam
Question 95

Which action results in the firewall blocking network traffic without notifying the sender?

    Correct Answer: A

    The correct action that results in the firewall blocking network traffic without notifying the sender is 'Drop.' When a firewall 'drops' a packet, it silently discards the packet without sending any notification to the sender. This is different from 'deny,' which might send an ICMP destination unreachable message back to the sender to inform them that their traffic was blocked.

Discussion
DilTOption: A

I think the correct answer should be "Drop" The difference between deny and drop is that deny will make a router (or other device) send an ICMP type 3 (destination unreachable) message response back, where drop will not notify the sending party that the device has be denied and just silently drop the traffic.

nabilzayOption: A

Answer should be A

ppowerOption: A

Though A.Drop would be my first choice here because traffic simply discarded without notifying the sender, option "Reset Server" notifies only Server side to close the socket meanwhile Client in unaware of the action.

atifikhanOption: A

A is correct answer

nunesduckOption: A

Drop is correct answer https://live.paloaltonetworks.com/t5/general-topics/to-drop-or-deny/m-p/206900#M60682

samir_maniyarOption: A

without notifying

RivandOption: A

Drop is correct

[Removed]Option: A

Answer is A https://docs.paloaltonetworks.com/pan-os/9-1/pan-os-admin/policy/security-policy/security-policy-actions Drop Silently drops the traffic; for an application, it overrides the default deny action. A TCP reset is not sent to the host/application. It can't be Reset-Server as it is only after a session has been established.

blahblah1234567890000Option: A

Its drop

blahblah1234567890000Option: A

A drop just literally drops the packet.

daytonadave2011Option: A

Drop is silent.

nuWatOption: A

For the reasons others have specified!!

HyayOption: A

That's what drop does

KhalidBOption: A

Drop a is correct