Palo_Alto_Networks

ACE · Question #109

The "Disable Server Return Inspection" option on a security profile:

The correct answer is B. Should only be enabled on security policies allowing traffic to a trusted server. See the full explanation below for the reasoning.

Question

The "Disable Server Return Inspection" option on a security profile:

Options

ACan only be configured in Tap Mode
BShould only be enabled on security policies allowing traffic to a trusted server.
CDoes not perform higher-level inspection of traffic from the side that originated the TCP SYN packet
DOnly performs inspection of traffic from the side that originated the TCP SYN-ACK packet

How the community answered

(25 responses)

A
8% (2)
B
72% (18)
C
4% (1)
D
16% (4)

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion

Full ACE Practice