Get Unlimited Contributor Access to the all ExamTopics Exams!
Take advantage of PDF Files for 1000+ Exams along with community discussions and pass IT Certification Exams Easily.
A customer wants to set up a VLAN interface for a Layer 2 Ethernet port. Which two mandatory options are used to configure a VLAN interface? (Choose two.)
I feel like this is one of those trick questions....You can create an interface that is marked as layer 2 type and it does not need an IP address. Just because it says vlan interface doesnt mean its layer 3 routable.
When walking through my palo none of these items are "required" when I create a physical interface and mark as a layer 2 vlan.
To configure a VLAN interface for a Layer 2 Ethernet port, the two mandatory options you need to set are:
A. Virtual router - This specifies which virtual router the VLAN interface is associated with. The virtual router handles the routing of traffic entering and leaving the VLAN.
B. Security zone - This option assigns the VLAN interface to a specific security zone. Security zones are used to control and manage traffic based on the security policies defined within the firewall.
Options C (ARP entries) and D (Netflow Profile) are not mandatory for configuring a VLAN interface. ARP entries are automatically managed by the device as needed, and a Netflow Profile is related to traffic monitoring, not a basic configuration requirement for setting up a VLAN interface.
Correct B and C
Layer 2, no mandatory virtual router(Layer 3) and not netflow profile
https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClRqCAK
Correct answer is A and B.
https://docs.paloaltonetworks.com/pan-os/10-2/pan-os-networking-admin/configure-interfaces/layer-2-interfaces/configure-a-layer-2-interface-subinterface-and-vlan
Thanks to Pass4surehub.com's study materials, I was able to stay focused on the Palo Alto-Networks PCNSA exam objectives. Their materials were clear, and concise, and covered all the necessary topics. Once again thanks to: https://shorturl.at/ipOP8
The question refers to a vlan interface which is essentially used to provide L3 connectivity for a vlan. In order to configure vlan interface, you have to provide security zone and virtual router within the configuration.
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
Edu147
Highly Voted 4 years, 9 months agoStevenWilliams0728
Most Recent 2 weeks agob8c290d
3 weeks, 2 days agoutahman3431
2 months, 1 week agoStevenWilliams0728
1 month, 1 week agozulu21
3 months, 3 weeks agoStevenWilliams0728
1 month, 1 week agoMarshpillowz
3 months, 3 weeks agoStevenWilliams0728
1 month, 1 week agokilluillu
4 months agoStevenWilliams0728
5 months, 4 weeks agoeasylife
6 months, 3 weeks agoNikita0806
8 months agoJRKhan
4 months, 1 week agotroiansmaxx
11 months, 3 weeks agomercysayno765
11 months, 4 weeks ago[Removed]
1 year, 1 month agokewokil120
1 year, 2 months agoQuestionario
1 year, 2 months agoMauz88
1 year, 3 months agolol12
1 year, 7 months ago