nerdexam
Palo_Alto_Networks

PCNSE · Question #212

How would an administrator monitor/capture traffic on the management interface of the Palo Alto Networks NGFW?

The correct answer is D. Use the tcpdump command. https://docs.paloaltonetworks.com/pan-os/10-1/pan-os-admin/monitoring/take-packet- captures/take-a-packet-capture-on-the-management-interface.html The tcpdump CLI command enables you to capture packets that traverse the management interface (MGT) on a Palo Alto Networks firewall.

Submitted by manish99· Apr 18, 2026Configuration Troubleshooting

Question

How would an administrator monitor/capture traffic on the management interface of the Palo Alto Networks NGFW?

Options

  • AUse the debug dataplane packet-diag set capture stage firewall file command.
  • BEnable all four stages of traffic capture (TX, RX, DROP, Firewall).
  • CUse the debug dataplane packet-diag set capture stage management file command.
  • DUse the tcpdump command.

How the community answered

(58 responses)
  • A
    3% (2)
  • B
    9% (5)
  • C
    2% (1)
  • D
    86% (50)

Explanation

https://docs.paloaltonetworks.com/pan-os/10-1/pan-os-admin/monitoring/take-packet- captures/take-a-packet-capture-on-the-management-interface.html The tcpdump CLI command enables you to capture packets that traverse the management interface (MGT) on a Palo Alto Networks firewall.

Topics

#Traffic Capture#Troubleshooting#Management Interface#tcpdump

Community Discussion

No community discussion yet for this question.

Full PCNSE Practice