Palo Alto Networks Certified Network Security Administrator (PCNSA) — Question 180

An administrator would like to block access to a web server, while also preserving resources and minimizing half-open sockets.

What are two security policy actions the administrator can select? (Choose two.)

Answer options

• A. Reset server
• B. Deny
• C. Drop
• D. Reset both

Correct answer: A, D

Explanation

Choosing 'Reset server' immediately terminates any connections, effectively blocking access while freeing up resources. 'Reset both' achieves a similar outcome by clearing both ends of the connection, thus minimizing half-open sockets. The other options, 'Deny' and 'Drop', do not actively close connections, which may not adequately manage resources or half-open sockets.