Palo_Alto_NetworksPalo_Alto_Networks
PCNSA · Question #167
PCNSA Question #167: Real Exam Question with Answer & Explanation
Sign in or unlock PCNSA to reveal the answer and full explanation for question #167. The question stem and answer options stay visible for context.
Submitted by tom_us· Apr 18, 2026Securing Traffic
Question
An administrator has configured a Security policy where the matching condition includes a single application, and the action is deny. If the application's default deny action is reset-both, what action does the firewall take?
Options
- AIt silently drops the traffic.
- BIt silently drops the traffic and sends an ICMP unreachable code.
- CIt sends a TCP reset to the server-side device.
- DIt sends a TCP reset to the client-side and server-side devices.
Unlock PCNSA to see the answer
You've previewed enough free PCNSA questions. Unlock PCNSA for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.
Topics
#Security Policy#Application Deny Action#TCP Reset#Traffic Enforcement