nerdexam
Palo_Alto_Networks

PCNSE · Question #99

Several offices are connected with VPNs using static IPv4 routes. An administrator has been tasked with implementing OSPF to replace static routing. Which step is required to accomplish this goal?

The correct answer is C. Assign OSPF Area ID 0.0.0.0 to all Ethernet and tunnel interfaces. To implement OSPF and replace static IPv4 routes, OSPF must be enabled on all participating Ethernet and tunnel interfaces and assigned an OSPF Area ID.

Submitted by kevin_r· Apr 18, 2026Deploy and Configure

Question

Several offices are connected with VPNs using static IPv4 routes. An administrator has been tasked with implementing OSPF to replace static routing. Which step is required to accomplish this goal?

Options

  • AAssign an IP address on each tunnel interface at each site
  • BEnable OSPFv3 on each tunnel interface and use Area ID 0.0.0.0
  • CAssign OSPF Area ID 0.0.0.0 to all Ethernet and tunnel interfaces
  • DCreate new VPN zones at each site to terminate each VPN connection

How the community answered

(51 responses)
  • A
    2% (1)
  • B
    8% (4)
  • C
    86% (44)
  • D
    4% (2)

Why each option

To implement OSPF and replace static IPv4 routes, OSPF must be enabled on all participating Ethernet and tunnel interfaces and assigned an OSPF Area ID.

AAssign an IP address on each tunnel interface at each site

Assigning an IP address to tunnel interfaces is a fundamental prerequisite for any routing over a tunnel, including static routes, but it is not the specific step that *implements OSPF* to replace static routing.

BEnable OSPFv3 on each tunnel interface and use Area ID 0.0.0.0

OSPFv3 is the version of OSPF designed for IPv6, whereas the question refers to static IPv4 routes, implying that OSPFv2 (or simply OSPF) is the appropriate protocol, not OSPFv3.

CAssign OSPF Area ID 0.0.0.0 to all Ethernet and tunnel interfacesCorrect

Implementing OSPF requires enabling the OSPF process on all relevant interfaces, including both physical Ethernet interfaces and VPN tunnel interfaces, and assigning them to an OSPF area, with 0.0.0.0 being the common backbone area for IPv4 OSPF (OSPFv2).

DCreate new VPN zones at each site to terminate each VPN connection

Creating new VPN zones is related to security policy management and controlling traffic flow, not a direct configuration step for implementing OSPF routing.

Concept tested: OSPF implementation on Palo Alto Networks (interfaces, areas)

Source: https://docs.paloaltonetworks.com/pan-os/10-2/pan-os-admin/networking/ospf/configure-ospf/configure-ospf-area

Topics

#OSPF Configuration#Routing Protocols#Interface Configuration#VPN Integration

Community Discussion

No community discussion yet for this question.

Full PCNSE Practice