ExamTopics Logo
Mail Us[email protected]
Menu
Palo-Alto-Networks Discussions
exam questions

Exam PCSFE All Questions

View all questions & answers for the PCSFE exam
Go to Exam

Exam PCSFE topic 1 question 85 discussion

Actual exam question from Palo Alto Networks's PCSFE
Question #: 85
Topic #: 1
[All PCSFE Questions]

After configuring a new software VM-Series firewall, the network team cannot detect any traffic being transmitted or received on the correct VLAN of the network switch. However, they are able to ping the management IP. Which two actions should be taken to troubleshoot this issue? (Choose two.)

  • A. Use tcpdump.
  • B. Debug flow create.
  • C. Check the port groups and port mapping on the hypervisor.
  • D. Show counter global filter.
Show Suggested Answer Hide Answer
Suggested Answer: AC 🗳️
by ChrjSM0512 at June 2, 2024, 7:26 p.m.

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Submit Cancel
1298ac2
10 months, 1 week ago
Selected Answer: CD
Difficult, I think I would go with C,D. With D you can check if packets are dropped. With a new firewall the reason might be the implicit "deny all" policy.
upvoted 1 times
...
ChrjSM0512
11 months ago
I can not see a way of tshoot data plane port through management plane port in this scenario, therefore C and D must be the option...B would be the option after D option is not enough.. tricky question again
upvoted 1 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago