nerdexam
Palo_Alto_NetworksPalo_Alto_Networks

PCNSE · Question #674

PCNSE Question #674: Real Exam Question with Answer & Explanation

The correct answer is C: show session packet-buffer- protection. The command 'show session packet-buffer-protection' displays the current status of packet buffer protection on the firewall, including whether it is enabled and whether it has been activated (i.e., currently enforcing drop actions due to buffer utilization thresholds being exceed

Submitted by lucia.co· Apr 18, 2026Configuration Troubleshooting

Question

An engineer troubleshoots an issue that causes packet drops. Which command should the engineer run in the CLI to see if packet buffer protection is enabled and activated?

Options

  • Ashow session id
  • Bshow system state | match packet-buffer-protection
  • Cshow session packet-buffer- protection
  • Dshow running resource-monitor

Explanation

The command 'show session packet-buffer-protection' displays the current status of packet buffer protection on the firewall, including whether it is enabled and whether it has been activated (i.e., currently enforcing drop actions due to buffer utilization thresholds being exceeded). This command is specific to the packet buffer protection feature and gives actionable status directly. 'show session id' shows details for a single session. 'show system state | match packet-buffer-protection' can surface state variables but is less direct. 'show running resource-monitor' shows zone-based resource monitoring, not packet buffer protection state.

Topics

#packet buffer protection#troubleshooting#CLI commands#packet drops

Community Discussion

No community discussion yet for this question.

Full PCNSE PracticeBrowse All PCNSE Questions