PCNSE · Question #380
An internal system is not functioning. The firewall administrator has determined that the incorrect egress interface is being used. After looking at the configuration, the administrator believes…
The correct answer is A. no install on the route C. path monitoring on the static route. A static route might not be used by the firewall if it fails to be installed into the routing table due to underlying network conditions, or if its configured path monitoring detects a failure and dynamically removes the route.
Question
An internal system is not functioning. The firewall administrator has determined that the incorrect egress interface is being used. After looking at the configuration, the administrator believes that the firewall is not using a static route. What are two reasons why the firewall might not use a static route? (Choose two.)
Options
- Ano install on the route
- Bduplicate static route
- Cpath monitoring on the static route
- Ddisabling of the static route
How the community answered
(29 responses)- A93% (27)
- B3% (1)
- D3% (1)
Why each option
A static route might not be used by the firewall if it fails to be installed into the routing table due to underlying network conditions, or if its configured path monitoring detects a failure and dynamically removes the route.
A static route will not be used if it cannot be installed into the firewall's routing table (FIB), which can occur if the associated egress interface is down or the next-hop is unreachable, preventing the route from becoming active.
While a duplicate static route with a worse administrative distance or metric will not be used, this implies another route *is* being used, which may not align with an administrator's belief that *a* specific route isn't being used.
If path monitoring is configured on a static route and the monitored destination becomes unreachable, the firewall will dynamically remove that static route from its routing table, causing it not to be used.
If a static route is explicitly disabled in the configuration, it is a deliberate administrative choice to not use it, rather than an operational reason why a seemingly active route is unexpectedly not being utilized.
Concept tested: Static route operational states and troubleshooting
Source: https://docs.paloaltonetworks.com/pan-os/10-2/pan-os-admin/networking/static-routes
Topics
Community Discussion
No community discussion yet for this question.