Cybersecurity-Apprentice Network Fundamentals Practice Question
An administrator is troubleshooting a connectivity issue between a host and a server across a Palo Alto Networks firewall. The administrator needs to verify whether the firewall is dropping the packets due to a security rule denial. Which CLI command should the administrator use to monitor packet drops in real time?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
show counter global filter packet-drop yes
The command 'show counter global filter packet-drop yes' allows administrators to view global packet drop counters in real time, which is essential for troubleshooting traffic drops on the firewall.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
show system resources
Why it's wrong here
This command displays CPU and memory utilization, not packet drops.
- ✗
show session all
Why it's wrong here
This command displays active sessions, not necessarily real-time dropped packets.
- ✓
show counter global filter packet-drop yes
Why this is correct
This command correctly filters global counters to display only those related to packet drops.
- ✗
show interface all
Why it's wrong here
This command displays interface status and error counters at the MAC/PHY layer, but not firewall security drop counters.
About these practice questions
Courseiva writes every Cybersecurity-Apprentice question from scratch — 177 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed August 2026 · checked against the official Palo Alto Networks exam blueprint
This Cybersecurity-Apprentice practice question is part of Courseiva's free Palo Alto Networks certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the Cybersecurity-Apprentice exam.