What are two ways to enable interface swap when deploying a VM-Series NGFW in Google Cloud Platform? (Choose two.)

Question

Options

• Arun the PAN-OS CLI command: set system mgmt-interface-swap enable yes
• Brun the PAN-OS CLI command: set system mgmt-interface-swap setting enable yes
• Ccreate a bootstrap file that includes the mgmt-interface-swap command
• Din the Google Cloud Console Metadata Field, enter a key-value pair where mgmt-interface-swap is

• A
  4% (2)
• B
  2% (1)
• C
  94% (51)

Explanation

When deploying a VM-Series NGFW in GCP, interface swap must be configured at deployment time before the firewall is fully operational - making bootstrap files and GCP instance metadata the two valid mechanisms. Option C (bootstrap file with the mgmt-interface-swap command) works because the firewall reads bootstrap configuration during initial boot. Option D works because GCP's instance metadata key-value pairs (key: mgmt-interface-swap, value: enable) are read by the VM-Series during initialization, achieving the same result without a full bootstrap package.

Options A and B are wrong for two reasons: both use incorrect PAN-OS CLI syntax (the actual command is set system setting management-interface-swap enable yes), and more critically, a CLI command requires the firewall to already be reachable and running - you cannot use CLI during initial deployment to configure interface swap before the management plane is up.

Memory tip: Think "Boot = Bootstrap + Backend metadata" - both C and D are methods that fire before PAN-OS is fully online, while CLI options require a live session, making them logically impossible as deployment-time solutions.

No community discussion yet for this question.