Palo Alto Networks Certified Network Security Consultant (PCNSC) — Question 16

Review the customer scenario:
- An organization has deployed an Active/Passive 7080 HA pair in their data center.
- The 7080 firewall has three 100G NPCs installed in slots 1, 2, and 12.
- In slots 1 and 2, the NPCs are being used to create two 200G Aggregate Ethernets with LACP to their switch infrastructure in a Layer 3 deployment with OSPF and BGP routing.
- The networking team has received alerts via SolarWinds recently that the NPC in slot 1 has a high DP load and high network utilization on one of its two interfaces.
What can you recommend to the team to balance the traffic more evenly and reduce high utilization of slot 1?

Answer options

• A. Enable ECMP with Symmetric Return.
• B. Enable Jumbo Packets.
• C. Change the Session Distribution Policy.
• D. Add a 100G interface from Slot 12 to the Aggregate Ethernet to provide more bandwidth.

Correct answer: C

Explanation

The correct answer is C, as changing the Session Distribution Policy can help distribute sessions more evenly across the available NPCs, thus relieving the load on slot 1. Options A and B do not address the issue of session distribution effectively, and while D might increase bandwidth, it doesn't directly balance the traffic across the existing NPCs.