Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
Question 29 of 267
Free Preview · 267 of 889 · questions 1–267 of 889 are free. Sign up free to sync your progress across devices.
Select one answer.
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
According to the KB article ans A is alos correct. it says "Incomplete means that either the three-way TCP handshake did not complete OR the three-way TCP handshake did complete but there was no enough data after the handshake to identify the application" Can someone clarify
B is correct https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClibCAC
I thought it could be A at first, but reading PaloSteve's comment, it looks like A has the wrong language. "Observed" rather than "complete" and left out "not enough data."