PCNSE · Question #13
PCNSE Question #13: Real Exam Question with Answer & Explanation
The correct answer is A: The devices are pre-configured with a virtual wire pair out the first two interfaces.. By default, Palo Alto Networks NGFWs ship with two pre-configured settings: (A) ethernet1/1 and ethernet1/2 are paired in a Virtual Wire configuration, allowing traffic to pass through without any IP configuration; and (C) the management interface is pre-assigned 192.168.1.1/24 a
Question
Which two statements are correct for the out-of-box configuration for Palo Alto Networks NGFWs? (Choose two)
Options
- AThe devices are pre-configured with a virtual wire pair out the first two interfaces.
- BThe devices are licensed and ready for deployment.
- CThe management interface has an IP address of 192.168.1.1 and allows SSH and HTTPS
- DA default bidirectional rule is configured that allows Untrust zone traffic to go to the Trust zone.
- EThe interfaces are pingable.
Explanation
By default, Palo Alto Networks NGFWs ship with two pre-configured settings: (A) ethernet1/1 and ethernet1/2 are paired in a Virtual Wire configuration, allowing traffic to pass through without any IP configuration; and (C) the management interface is pre-assigned 192.168.1.1/24 and permits SSH and HTTPS access for initial setup. The devices are NOT pre-licensed (B is false). The default security policy denies inter-zone traffic like Untrust-to-Trust - there is no permissive bidirectional rule (D is false). Data plane interfaces do not respond to ping by default (E is false).
Topics
Community Discussion
No community discussion yet for this question.