PCNSE Question #380: Real Exam Question with Answer & Explanation

Question

An internal system is not functioning. The firewall administrator has determined that the incorrect egress interface is being used. After looking at the configuration, the administrator believes that the firewall is not using a static route. What are two reasons why the firewall might not use a static route? (Choose two.)

Options

• Ano install on the route
• Bduplicate static route
• Cpath monitoring on the static route
• Ddisabling of the static route

Explanation

A static route might not be used by the firewall if it fails to be installed into the routing table due to underlying network conditions, or if its configured path monitoring detects a failure and dynamically removes the route.

Common mistakes.

• B. While a duplicate static route with a worse administrative distance or metric will not be used, this implies another route is being used, which may not align with an administrator's belief that a specific route isn't being used.
• D. If a static route is explicitly disabled in the configuration, it is a deliberate administrative choice to not use it, rather than an operational reason why a seemingly active route is unexpectedly not being utilized.

Concept tested. Static route operational states and troubleshooting

Reference. https://docs.paloaltonetworks.com/pan-os/10-2/pan-os-admin/networking/static-routes

No community discussion yet for this question.