A.
The service packets exit the firewall on the port assigned for the external service. The server sends its response to the configured source interface and source IP address.
B.
The service packets enter the firewall on the port assigned from the external service. The server sends its response to the configured destination interface and destination IP address.
C.
The service route is the method required to use the firewall's management plane to provide services to applications.
D.
Service routes provide access to external services, such as DNS servers, external authentication servers or Palo Alto Networks services like the Customer Support Portal.
The answer is D. They asked what is the function? Not how does it work. But, what is the function. (A) does not describe the function. Look at the documentation, "The firewall uses the management (MGT) interface by default to access external services, such as DNS servers, external authentication servers, Palo Alto Networks® services such as software, URL updates, licenses and AutoFocus. An ALTERNATIVE to using the MGT interface is to configure a data port (a regular interface) to access these services." -https://docs.paloaltonetworks.com/pan-os/10-1/pan-os-networking-admin/service-routes/service-routes-overview#id69ef535a-d5b0-4c79-bb7f-1302a438e7c5
Hi bros, well you don't "send" the TSF through the management but upload it directly in the CSP, so I think the most accurate answer in this case is "A", D does explains the service route function but it's wrong written with that last statement.
The firewall uses the management (MGT) interface by default to access external services, such as DNS servers, external authentication servers, Palo Alto Networks® services such as software, URL updates, licenses and AutoFocus. An alternative to using the MGT interface is to configure a data port (a regular interface) to access these services. The path from the interface to the service on a server is known as a service route
The firewall uses the management (MGT) interface by default to access external services, such as DNS servers, external authentication servers, Palo Alto Networks®
services such as software, URL updates, licenses and AutoFocus. An alternative to using the MGT interface is to configure a data port (a regular interface) to access these services. The path from the interface to the service on a server is known as a service route.
For the peoples who have still doubt about the answer it should be D.
What is the function of a service route?
A. The service packets exit the firewall on the port assigned for the external service. The server sends its response to the configured source interface and source IP address.
D. Service routes provide access to external services, such as DNS servers, external authentication servers or Palo Alto Networks services like the Customer Support Portal.
The question is about "service routes" and no "service packet" in the answer A that doesn't exist :D
See Thunnu's comment. The Answer is A. https://docs.paloaltonetworks.com/pan-os/10-1/pan-os-networking-admin/service-routes/service-routes-overview#id69ef535a-d5b0-4c79-bb7f-1302a438e7c
Option A is correct
Below option is wrong because although service routes provide access to external services but they are not configured by default. They are to be used in case management interface is not to be used.
D. Service routes provide access to external services, such as DNS servers, external authentication servers or Palo Alto Networks services like the Customer Support Portal.
Actually just ignore that. The correct option is D because the question is about the "Function"
Option A is not a function.
D seems to be a more specific response to the question.
Answer is A
https://docs.paloaltonetworks.com/pan-os/10-1/pan-os-networking-admin/service-routes/service-routes-overview#id69ef535a-d5b0-4c79-bb7f-1302a438e7c5
The service packets exit the firewall on the port assigned for the external service and the server sends its response to the configured source interface and source IP address.
First Paragraph, Last statement
"The service packets exit the firewall on the port assigned for the external service and the server sends its response to the configured source interface and source IP address."
https://docs.paloaltonetworks.com/pan-os/10-1/pan-os-networking-admin/service-routes/service-routes-overview#id69ef535a-d5b0-4c79-bb7f-1302a438e7c5
The answer D does say "Like the customer support portal" doesn't say it's the only thing...and the FW does contact that for license and if the case maybe ZTP for device certificate. Having said that answer A definitely comes verbatim from the documentation. Both are seemingly accurate.
Is D. The firewall uses the management (MGT) interface by default to access external services, such as DNS servers, external authentication servers ...
https://docs.paloaltonetworks.com/pan-os/9-1/pan-os-admin/networking/service-routes
This section is not available anymore. Please use the main Exam Page.PCNSE Exam Questions
Log in to ExamTopics
Sign in:
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
west33637
Highly Voted 2 years, 6 months agoEluis007
1 year, 1 month agoKebrape
8 months, 1 week agoCarlosDV06
6 months, 3 weeks agoDSBlue
Most Recent 2 months, 3 weeks agostephenw13
2 months, 3 weeks agokabuelenain
3 months agoSCCUser
4 months, 1 week agoapiloran
8 months agojeremykebir
11 months agoALCOSTA35
6 months ago0d2fdfa
1 year ago0d2fdfa
1 year agoThunnu
1 year, 2 months agoALCOSTA35
6 months agoXuzi
1 year, 6 months agosov4
1 year, 9 months agomercysayno765
1 year, 10 months agoPochex
2 years, 2 months agolildevil
2 years agoFrightened_Acrobat
2 years, 2 months ago[Removed]
2 years, 2 months agozemijan
2 years, 3 months agomic_mic
2 years, 4 months ago