nerdexam
Palo_Alto_Networks

PCNSE · Question #380

An internal system is not functioning. The firewall administrator has determined that the incorrect egress interface is being used. After looking at the configuration, the administrator believes…

The correct answer is A. no install on the route C. path monitoring on the static route. A static route might not be used by the firewall if it fails to be installed into the routing table due to underlying network conditions, or if its configured path monitoring detects a failure and dynamically removes the route.

Submitted by manish99· Apr 18, 2026Configuration Troubleshooting

Question

An internal system is not functioning. The firewall administrator has determined that the incorrect egress interface is being used. After looking at the configuration, the administrator believes that the firewall is not using a static route. What are two reasons why the firewall might not use a static route? (Choose two.)

Options

  • Ano install on the route
  • Bduplicate static route
  • Cpath monitoring on the static route
  • Ddisabling of the static route

How the community answered

(29 responses)
  • A
    93% (27)
  • B
    3% (1)
  • D
    3% (1)

Why each option

A static route might not be used by the firewall if it fails to be installed into the routing table due to underlying network conditions, or if its configured path monitoring detects a failure and dynamically removes the route.

Ano install on the routeCorrect

A static route will not be used if it cannot be installed into the firewall's routing table (FIB), which can occur if the associated egress interface is down or the next-hop is unreachable, preventing the route from becoming active.

Bduplicate static route

While a duplicate static route with a worse administrative distance or metric will not be used, this implies another route *is* being used, which may not align with an administrator's belief that *a* specific route isn't being used.

Cpath monitoring on the static routeCorrect

If path monitoring is configured on a static route and the monitored destination becomes unreachable, the firewall will dynamically remove that static route from its routing table, causing it not to be used.

Ddisabling of the static route

If a static route is explicitly disabled in the configuration, it is a deliberate administrative choice to not use it, rather than an operational reason why a seemingly active route is unexpectedly not being utilized.

Concept tested: Static route operational states and troubleshooting

Source: https://docs.paloaltonetworks.com/pan-os/10-2/pan-os-admin/networking/static-routes

Topics

#Static Routing#Route Installation#Path Monitoring#Routing Table

Community Discussion

No community discussion yet for this question.

Full PCNSE Practice