Palo_Alto_NetworksPalo_Alto_Networks
PCNSA · Question #171
PCNSA Question #171: Real Exam Question with Answer & Explanation
Sign in or unlock PCNSA to reveal the answer and full explanation for question #171. The question stem and answer options stay visible for context.
Submitted by carlos_mx· Apr 18, 2026Securing Traffic
Question
An administrator would like to override the default deny action for a given application, and instead would like to block the traffic and send the ICMP code "communication with the destination is administratively prohibited". Which security policy action causes this?
Options
- ADrop
- BDrop, send ICMP Unreachable
- CReset both
- DReset server
Unlock PCNSA to see the answer
You've previewed enough free PCNSA questions. Unlock PCNSA for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.
Topics
#Security Policy Actions#ICMP Unreachable#Traffic Control#Palo Alto Firewall