NGFW-ENGINEER Question #102: Real Exam Question with Answer & Explanation

The correct answer is B: NetFlow export. NetFlow export requires the interface to operate in Layer 3 mode because it depends on IP routing and flow records derived from Layer 3 traffic, which are not available on interfaces configured as Layer 2, virtual wire, or other non–Layer 3 modes.

Network Interface Configuration and Features

Question

When configuring a physical interface on a Palo Alto Networks firewall, which IP-based service is only available if the interface is set to Layer 3 mode?

Options

ADDNS client
BNetFlow export
CQoS
DLink monitoring

Explanation

NetFlow export requires the interface to operate in Layer 3 mode because it depends on IP routing and flow records derived from Layer 3 traffic, which are not available on interfaces configured as Layer 2, virtual wire, or other non–Layer 3 modes.

Topics

#Palo Alto Networks interfaces#Interface modes (L2/L3)#NetFlow/IPFIX#Network monitoring

Community Discussion

No community discussion yet for this question.

Full NGFW-ENGINEER Practice Browse All NGFW-ENGINEER Questions