ExamTopics Logo
Mail Us[email protected]
Menu
Palo-Alto-Networks Discussions
exam questions

Exam PCNSE All Questions

View all questions & answers for the PCNSE exam
Go to Exam

Exam PCNSE topic 1 question 112 discussion

Actual exam question from Palo Alto Networks's PCNSE
Question #: 112
Topic #: 1
[All PCNSE Questions]

An administrator wants a new Palo Alto Networks NGFW to obtain automatic application updates daily, so it is configured to use a scheduler for the application database. Unfortunately, they required the management network to be isolated so that it cannot reach the Internet.
Which configuration will enable the firewall to download and install application updates automatically?

  • A. Download and install application updates cannot be done automatically if the MGT port cannot reach the Internet.
  • B. Configure a service route for Palo Alto Networks Services that uses a dataplane interface that can route traffic to the Internet, and create a Security policy rule to allow the traffic from that interface to the update servers if necessary.
  • C. Configure a Policy Based Forwarding policy rule for the update server IP address so that traffic sourced from the management interfaced destined for the update servers goes out of the interface acting as your Internet connection.
  • D. Configure a Security policy rule to allow all traffic to and from the update servers.
Show Suggested Answer Hide Answer
Suggested Answer: B 🗳️
by zhawk7661 at July 13, 2020, 8:20 p.m.

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Submit Cancel
zhawk7661
Highly Voted 4 years, 3 months ago
Correct Answer: B
upvoted 11 times
Acidscars
3 years, 8 months ago
Agree. Service Route will solve this problem. B
upvoted 3 times
...
...
Marshpillowz
Most Recent 9 months, 2 weeks ago
Selected Answer: B
B is correct
upvoted 1 times
...
DenskyDen
1 year, 9 months ago
Selected Answer: B
https://docs.paloaltonetworks.com/pan-os/9-1/pan-os-admin/networking/service-routes
upvoted 1 times
...
TAKUM1y
2 years, 1 month ago
Selected Answer: B
https://docs.paloaltonetworks.com/pan-os/10-1/pan-os-networking-admin/service-routes/service-routes-overview
upvoted 2 times
...
UFanat
2 years, 4 months ago
Selected Answer: B
If management port cannot reach the Internet you should manually configure service routes
upvoted 2 times
...
fireb
2 years, 5 months ago
B is correct.
upvoted 2 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago