Exam PCNSE All Questions

View all questions & answers for the PCNSE exam

Exam PCNSE topic 1 question 526 discussion

Actual exam question from Palo Alto Networks's PCNSE

Question #: 526
Topic #: 1

An engineer is configuring a firewall with three interfaces:

• MGT connects to a switch with internet access.
• Ethernet1/1 connects to an edge router.
• Ethernet1/2 connects to a virtualization network.

The engineer needs to configure dynamic updates to use a dataplane interface for internet traffic.
What should be configured in Setup > Services > Service Route Configuration to allow this traffic?

A. Set DNS and Palo Alto Networks Services to use the MGT source interface.
B. Set DNS and Palo Alto Networks Services to use the ethernet1/1 source interface.
C. Set DNS and Palo Alto Networks Services to use the ethernet1/2 source interface.
D. Set DDNS and Palo Alto Networks Services to use the MGT source interface.

Show Suggested Answer

Suggested Answer: B 🗳️

by mercysayno765 at June 11, 2023, 1:59 a.m.

Comments

Submit Cancel

brian7857ffs45

Highly Voted 1 year, 7 months ago

This question was on the exam.. Nov 2023

upvoted 6 times

...

nebulanerd

Most Recent 1 year ago

Selected Answer: B

B for sure!

upvoted 2 times

...

cerifyme85

1 year, 1 month ago

Selected Answer: C

U cannot use an outside interface for service routes. It has to be an internal interface. Then adjust routing to suit

upvoted 1 times

scanossa

1 year ago

Why not? I've done it

upvoted 1 times

...

nebulanerd

1 year ago

I'm really sorry, but based on my experience in labs and in the field, there are so many ways to implement and improve it on this case: B. Set DNS and Palo Alto Networks Services to use the ethernet1/1 source interface.

upvoted 2 times

...

evilCorpBot7494

1 year, 3 months ago

Selected Answer: B

B) is correct In A) the MGT interface is not a dataplane interface as the question requests In C) the E1/2 interface has no direct internet access as it goes to a virtualization network.

upvoted 4 times

Cyril_the_Squirl

2 weeks, 1 day ago

You're absolutely right, the question is specifically talking about using a "dataplane interface", that makes only Ethernet1/1 the only option.

upvoted 1 times

...

Marshpillowz

1 year, 5 months ago

Selected Answer: B

B is correct

upvoted 3 times

...

omgt2k2

1 year, 5 months ago

Selected Answer: B

dataplane interface. the MGMT interface is on the Controlplane.

upvoted 4 times

...

Andromeda1800

1 year, 6 months ago

Selected Answer: B

Correct B

upvoted 3 times

...

McMarius11

1 year, 8 months ago

B is the way!

upvoted 2 times

...

MHy2k

1 year, 9 months ago

B Base on this: https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClGJCA0

upvoted 2 times

...

ChiaPet75

1 year, 10 months ago

The answer is "A". The question states the MGT interface is already connected to a switch with Internet access. Only need to configure DNS to point to 8.8.8.8 for resolution.

upvoted 1 times

ChiaPet75

1 year, 10 months ago

My bad I mis-read the question. The answer is "B". :-p

upvoted 1 times

...

Pochex

2 years ago

B seems to be a better option since an edge router is located at a network boundary and enables an internal network to connect to the Internet.

upvoted 3 times

...

Knowledge33

2 years ago

Selected Answer: B

Like many other PCNSE questions, this question is really weird. We don't know if the edge router has access to Internet, or if It's the virtual network which is having access to Internet. Anyway, B Looks better.

upvoted 2 times