Match each security rule action to its effect.
Drag a concept onto its matching description — or click a concept then click the description.
Permits traffic matching the rule
Blocks traffic and sends a reset
Silently discards traffic without notification
Sends TCP reset to client only
Sends TCP reset to both client and server
Answer choices
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
Allow: Permits traffic to pass through the firewall.
Correct matches: Allow permits traffic; Deny blocks and sends TCP reset. Drop silently blocks traffic. Common confusion is between Deny and Drop.
Answer analysis
For each option: why learners choose it and why it is or isn't the right answer here.
Allow: Permits traffic to pass through the firewall.
Why this is correct
Allow permits matching traffic, allowing it to traverse the firewall.
Deny: Blocks traffic and sends a TCP reset to the source.
Why this is correct
Deny blocks the session and sends a TCP reset to terminate the connection.
Allow: Blocks traffic and sends a TCP reset to the source.
Why it's wrong here
Incorrect — Allow permits traffic; blocking with TCP reset is the action of Deny.
Deny: Silently drops traffic without any notification.
Why it's wrong here
Incorrect — this describes the Drop action, not Deny. Deny sends a TCP reset.
Visual reference
Go deeper
About these practice questions
One of 504 original PCNSE practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This PCNSE practice question is part of Courseiva's free Palo Alto Networks certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the PCNSE exam.