PCNSA · Question #265
Which firewall feature do you need to configure to query Palo Alto Networks service updates over a data-plane interface instead of the management interface?
The correct answer is A. service route. To route Palo Alto Networks service updates over a data-plane interface instead of the default management interface, an administrator must configure a service route.
Question
Which firewall feature do you need to configure to query Palo Alto Networks service updates over a data-plane interface instead of the management interface?
Options
- Aservice route
- Bdynamic updates
- CSNMP setup
- Ddata redistribution
How the community answered
(24 responses)- A92% (22)
- C4% (1)
- D4% (1)
Why each option
To route Palo Alto Networks service updates over a data-plane interface instead of the default management interface, an administrator must configure a service route.
Service routes allow specific services, such as dynamic updates (Threat, Antivirus, etc.), DNS, or NTP, to use a data-plane interface and its associated routing table instead of the management interface.
Dynamic updates refer to the updates themselves, not the mechanism for routing their communication over a data-plane interface.
SNMP setup is for monitoring the firewall, not for routing service update traffic over a specific interface.
'Data redistribution' is not a standard firewall feature related to routing service updates.
Concept tested: Service routes for update traffic
Source: https://docs.paloaltonetworks.com/pan-os/10-2/pan-os-admin/network/service-routes
Topics
Community Discussion
No community discussion yet for this question.