Palo Alto Networks Certified Network Security Engineer (PCNSE) — Question 400

An engineer troubleshoots an issue that causes packet drops.

Which command should the engineer run in the CLI to see if packet buffer protection is enabled and activated?

Answer options

• A. show session id
• B. show system state | match packet-buffer-protection
• C. show session packet-buffer- protection
• D. show running resource-monitor

Correct answer: C

Explanation

The correct command to check if packet buffer protection is enabled is 'show session packet-buffer-protection', as it directly queries the session settings related to packet buffer. The other options either do not pertain specifically to packet buffer protection or are not related commands for this specific check.