NGFW EngineerDemo

By Palo Alto Networks · Question Mode

QuestionQ7

PAN-OS Networking Configuration

A Palo Alto Networks firewall has these interfaces configured:

  • ethernet1/1 (Layer 3)
  • ethernet1/2 (TAP)
  • ethernet1/3 (Layer 2)
  • ethernet1/4 (virtual wire)

An administrator must create a link group to monitor upstream connectivity for high-availability (HA) failover.

Which interface set can be added to the link group?

  • A ethernet1/1, ethernet1/2, ethernet1/4
  • B ethernet1/1, ethernet1/2, ethernet1/3
  • C ethernet1/2, ethernet1/3, ethernet1/4
  • D ethernet1/1, ethernet1/3, ethernet1/4
Explanation

HA link monitoring evaluates the physical link state of forwarding interfaces. Layer 3, Layer 2, and virtual wire interfaces are eligible, whereas a TAP interface is a passive traffic-copy interface and cannot be added to an HA link-monitoring group.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!