Palo_Alto_Networks

PCNSE6 · Question #124

The "Disable Server Return Inspection" option on a security profile:

The correct answer is B. Should only be enabled on security policies allowing traffic to a trusted server. See the full explanation below for the reasoning.

Question

The "Disable Server Return Inspection" option on a security profile:

Options

ACan only be configured in Tap Mode
BShould only be enabled on security policies allowing traffic to a trusted server.
CDoes not perform higher-level inspection of traffic from the side that originated the TCP SYN
DOnly performs inspection of traffic from the side that originated the TCP SYN-ACK packet

How the community answered

(40 responses)

A
5% (2)
B
80% (32)
C
3% (1)
D
13% (5)

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion

Full PCNSE6 Practice