Palo_Alto_Networks
PCNSA · Question #90
Which action results in the firewall blocking network traffic without notifying the sender?
The correct answer is A. Drop. The difference between deny and drop is that deny will make a router (or other device) send an ICMP type 3 (destination unreachable) message response back, where drop will not notify the sending party that the device has be denied and just silently drop the traffic.
Submitted by fatima_kr· Apr 18, 2026Securing Traffic
Question
Which action results in the firewall blocking network traffic without notifying the sender?
Options
- ADrop
- BDeny
- CReset Server
- DReset Client
How the community answered
(47 responses)- A94% (44)
- B2% (1)
- C4% (2)
Explanation
The difference between deny and drop is that deny will make a router (or other device) send an ICMP type 3 (destination unreachable) message response back, where drop will not notify the sending party that the device has be denied and just silently drop the traffic.
Topics
#Firewall Actions#Security Policy#Drop Action#Traffic Blocking
Community Discussion
No community discussion yet for this question.