nerdexam
Palo_Alto_Networks

NGFW-ENGINEER · Question #88

An administrator needs to ensure that a firewall can download threat prevention and software updates, but the management port is on an isolated network without internet access. Which service must be…

The correct answer is C. Palo Alto Networks Services. Threat prevention and software updates are delivered through Palo Alto Networks Services, and when the management interface lacks internet access, this service must be rerouted through a data plane interface using a service route so the firewall can reach the update…

Device Management

Question

An administrator needs to ensure that a firewall can download threat prevention and software updates, but the management port is on an isolated network without internet access. Which service must be rerouted through a data plane interface using a service route to allow the firewall to download these updates?

Options

  • AExternal dynamic lists
  • BGlobalProtect Clientless VPN
  • CPalo Alto Networks Services
  • DSyslog

How the community answered

(46 responses)
  • A
    2% (1)
  • B
    4% (2)
  • C
    91% (42)
  • D
    2% (1)

Explanation

Threat prevention and software updates are delivered through Palo Alto Networks Services, and when the management interface lacks internet access, this service must be rerouted through a data plane interface using a service route so the firewall can reach the update infrastructure.

Topics

#Service Routes#Firewall Updates#Device Management#Palo Alto Networks Services

Community Discussion

No community discussion yet for this question.

Full NGFW-ENGINEER Practice