Palo Alto Networks Certified Network Security Administrator (PCNSA) — Question 108

The Palo Alto Networks NGFW was configured with a single virtual router named VR-1.
What changes are required on VR-1 to route traffic between two interfaces on the NGFW?

Answer options

• A. Add static routes to route between the two interfaces
• B. Add interfaces to the virtual router
• C. Add zones attached to interfaces to the virtual router
• D. Enable the redistribution profile to redistribute connected routes

Correct answer: B

Explanation

The correct answer is B because for the virtual router to manage traffic between multiple interfaces, those interfaces must first be added to the virtual router. Options A and D pertain to routing and redistribution configurations which are not necessary for enabling basic connectivity between interfaces. Option C involves zones, which are important for security policies but do not directly affect routing between interfaces.