Palo Alto Networks Certified Network Security Administrator (PCNSA) — Question 18

You must configure which firewall feature to enable a data-plane interface to submit DNS queries on behalf of the control plane?

Answer options

• A. virtual router
• B. Admin Role profile
• C. DNS proxy
• D. service route

Correct answer: D

Explanation

The correct answer is D, as configuring a service route allows the data-plane interface to reach external DNS servers for queries initiated by the control plane. The other options, such as virtual router, Admin Role profile, and DNS proxy, do not specifically facilitate this functionality in the context described.