nerdexam
Palo_Alto_Networks

PCNSE7 · Question #117

PCNSE7 Question #117: Real Exam Question with Answer & Explanation

The correct answer is A. Layer 3 subinterface type with specified tag. The interface ethernet1/15 is configured as a layer 3 interface. Subinterfaces corresponding to each one of the VLAN are created off of the parent interface Ethernet 1/15. Each subinterface is assigned a VLAN tag and an IP address corresponding to the VLAN provides connectivity.

Question

A network design calls for a "router on a stick" implementation with a PA-5060 performing inter- VLAN routing. All VLAN-tagged traffic will be forwarded to the PA-5060 through a single dot1q trunk interface. Which interface type and configuration setting will support this design?

Exhibit

PCNSE7 question #117 exhibit

Options

  • ALayer 3 subinterface type with specified tag
  • BLayer 3 interface type with specified tag
  • CTrunk interface type with specified lag
  • DLayer 2 interface type with a VLAN assigned

Explanation

The interface ethernet1/15 is configured as a layer 3 interface. Subinterfaces corresponding to each one of the VLAN are created off of the parent interface Ethernet 1/15. Each subinterface is assigned a VLAN tag and an IP address corresponding to the VLAN provides connectivity. Note: Inter VLAN routing with each VLAN in a unique IP subnet In order for network devices in different VLANs to communicate, a router must be used to route traffic between the VLANs. While VLANs help to control local traffic, if a device in one VLAN needs to communicate with a device in another VLAN, one or more routers must be used for inter VLAN communication. In this configuration a Palo Alto networks firewall can used to securely route traffic within the VLAN. This is also commonly called "one arm routing" or "router on a stick".

Community Discussion

No community discussion yet for this question.

Full PCNSE7 Practice