You must configure which firewall feature to enable a data-plane interface to submit DNS queries on behalf of the control plane?

The correct answer is D. service route. Service routes define which firewall interface and source IP address are used for management-plane or control-plane services (such as DNS, NTP, syslog, and software updates) that originate from the firewall itself. By default, these services use the dedicated management interface

Submitted by tyler.j· Apr 18, 2026Device Management and Services

Question

Exhibit

Options

Avirtual router
BAdmin Role profile
CDNS proxy
Dservice route

How the community answered

(41 responses)

A
2% (1)
B
7% (3)
C
2% (1)
D
88% (36)

Explanation

Service routes define which firewall interface and source IP address are used for management-plane or control-plane services (such as DNS, NTP, syslog, and software updates) that originate from the firewall itself. By default, these services use the dedicated management interface. Configuring a service route for DNS allows the firewall to send DNS queries out through a data-plane interface instead. A virtual router (A) handles routing for data-plane traffic but does not redirect control-plane service traffic. An Admin Role profile (B) governs administrative access privileges. A DNS proxy (C) makes the firewall act as a DNS server for clients-it does not redirect the firewall's own DNS queries to a data-plane interface.

Topics

#Service routes#Control plane#DNS#Interface configuration

Community Discussion

No community discussion yet for this question.

Full PCNSA Practice