A network design change requires an existing firewall to start accessing Palo Alto Updates from a data plane interface address instead of the management interface. Which configuration setting needs…

Service routes explicitly define which source interface and IP address the firewall itself uses when initiating traffic for management services like updates, syslog, or NTP, overriding default routing behavior.

A default route determines the outgoing path for traffic without a more specific route, but it does not dictate the source interface for firewall-originated management traffic like updates.

A management profile defines access permissions for managing the firewall's interfaces (e.g., HTTP, SSH) but does not control the source interface used by the firewall for outbound services like updates.

An authentication profile defines how users are authenticated, which is unrelated to configuring the firewall's source interface for accessing updates.