PCCSE practice question 25 of 35

The attempted bytes count displays?

Full set: 259 questions
Answer options
A: traffic that is either denied by the security group or firewall rules or traffic that was reset by a host or virtual machine that received the packet and responded with a RST packet. Correct answer
B: traffic that is either denied by the security group or firewall rules.
C: traffic that is either denied by the firewall rules or traffic that was reset by a host or virtual machine that received the packet and responded with a RST packet.
D: traffic denied by the security group or traffic that was reset by a host or virtual machine that received the packet and responded with a RST packet.
Correct Answer:
A. traffic that is either denied by the security group or firewall rules or traffic that was reset by a host or virtual machine that received the packet and responded with a RST packet.
Explanation

In Prisma Cloud's network traffic analysis, the "attempted bytes count" is a comprehensive metric for non-successful traffic. It aggregates data for traffic that was blocked before reaching its destination and traffic that was explicitly rejected by the destination. This includes packets denied by infrastructure-level controls like security groups or network ACLs/firewall rules, as well as packets that reached a host which then responded with a TCP reset (RST) packet, indicating the connection was refused.

Why Incorrect

B. This is incomplete. It omits traffic that was rejected by the host with a TCP RST packet.
C. This is incomplete. It omits traffic that was denied by security group rules.
D. This is incomplete. It omits traffic that was denied by firewall rules (or network ACLs).

References

1. Palo Alto Networks, "Prisma Cloud Administrator's Guide - Investigate Network Traffic on AWS," Section: "Network Query Attributes." The documentation defines "Attempted In/Out Bytes" as representing traffic that is either denied by security groups/network ACLs or traffic that was reset by a host that received the packet and responded with a RST packet.

Scroll to Top