It seems your answer is correct but i think for better explanation below article is suitable which state that if we deny all it gives 404 but for specified area deny it gives 403.Am I correct?? https://github.com/AdobeDocs/experience-manager-dispatcher.en/blob/main/help/using/dispatcher-configuratio...