A firewall administrator needs to check which egress interface the firewall will use to route the IP 10.2.5.3. Which command should they use?

The correct answer is D. test routing fib-lookup ip 10.2.5.3 virtual-router default. test routing fib-lookup ip <ip/netmask> virtual-router <value> ecmp source-ip <ip/netmask> source-port <1-65535> destination-ip <ip/ netmask> destination-port <1-65535> https://docs.paloaltonetworks.com/content/dam/techdocs/en_US/pdf/pan-os/10-2/pan-os-cli- quick-start/pan-os-cli

Submitted by satoshi_tk· Apr 18, 2026Configuration Troubleshooting

Question

Options

Atest routing fib-lookup ip 10.2.5.0/24 virtual-router default
Btest routing route ip 10.2.5.3
Ctest routing route ip 10.2.5.3 virtual-router default
Dtest routing fib-lookup ip 10.2.5.3 virtual-router default

How the community answered

(60 responses)

A
3% (2)
B
5% (3)
C
2% (1)
D
90% (54)

Explanation

test routing fib-lookup ip <ip/netmask> virtual-router <value> ecmp source-ip <ip/netmask> source-port <1-65535> destination-ip <ip/ netmask> destination-port <1-65535> https://docs.paloaltonetworks.com/content/dam/techdocs/en_US/pdf/pan-os/10-2/pan-os-cli- quick-start/pan-os-cli-quick-start.pdf

Topics

#CLI commands#Routing#FIB lookup#Diagnostic tools

Community Discussion

No community discussion yet for this question.

Full PCNSE Practice