A customer has just launched a Palo Alto Networks VM-Series NGFW into an Amazon Web Services VPC to protect a cloud hosted application. They are experiencing unpredictable results and have…

Question

Options

• Aset system setting mgmt-interface-swap enable yes
• Bset mgmt-interface settings swap yes
• Cset mgmt-interface swap yes
• Dset system setting mgmt-interface swap yes

• A
  71% (24)
• B
  18% (6)
• C
  9% (3)
• D
  3% (1)

Explanation

Option A is correct because set system setting mgmt-interface-swap enable yes is the exact PAN-OS CLI command designed for AWS deployments where the VM-Series NGFW maps interfaces differently than expected - AWS attaches the first network interface (eth0) as the management interface, but PAN-OS expects eth0 to be the data plane interface (ethernet1/1). This command swaps the management and data plane interface assignments to align with AWS's interface ordering.

Why the distractors fail:

• B (set mgmt-interface settings swap yes) - invalid syntax; "settings" is not part of the command hierarchy
• C (set mgmt-interface swap yes) - incomplete path; missing the system setting portion of the hierarchy
• D (set system setting mgmt-interface swap yes) - close but wrong; the correct keyword is mgmt-interface-swap enable yes, not mgmt-interface swap yes

Memory tip: Think of it as a full "system setting" change requiring an explicit enable yes toggle - the hyphenated mgmt-interface-swap is one compound noun, and AWS is the only major cloud platform that requires this swap due to how it orders virtual NICs. If you remember "AWS = swap needed = set system setting mgmt-interface-swap enable yes," you'll nail it on the exam.

No community discussion yet for this question.