PCNSA · Question #357
Ethernet 2/1 has an IP Address of 10.0.1.2 in Zone 'trust' (LAN). If both interfaces are connected to the same virtual router, which IP address information will an administrator need to enter in the…
The correct answer is D. 0.0.0.0/0. To access the internet, a default route is required, which is represented by 0.0.0.0/0 in the destination field of a static route.
Question
Ethernet 2/1 has an IP Address of 10.0.1.2 in Zone 'trust' (LAN). If both interfaces are connected to the same virtual router, which IP address information will an administrator need to enter in the Destination field to access the internet?
Exhibit
Options
- A0.0.0.0
- B10.0.2.1/32
- C10.0.1.254/32
- D0.0.0.0/0
How the community answered
(53 responses)- A4% (2)
- B2% (1)
- C6% (3)
- D89% (47)
Why each option
To access the internet, a default route is required, which is represented by 0.0.0.0/0 in the destination field of a static route.
While 0.0.0.0 represents "any IP address," it needs the /0 subnet mask to explicitly define it as a default route for all traffic, rather than just a host address.
10.0.2.1/32 represents a specific host IP address and would only match traffic destined for that single host, not the entire internet.
10.0.1.254/32 represents a specific host IP address, likely a gateway on the local LAN, and would not serve as a default route for the entire internet.
To access the internet, the firewall needs a default route that specifies how to forward traffic to destinations not explicitly defined in its routing table. This "route of last resort" is universally represented by the IP address 0.0.0.0 with a /0 subnet mask, signifying "any destination IP address."
Concept tested: Default route for internet access
Source: https://docs.paloaltonetworks.com/pan-os/10-2/pan-os-admin/networking/static-routes.html
Topics
Community Discussion
No community discussion yet for this question.
