Palo Alto Networks Certified Network Security Engineer (PCNSE) — Question 247

An existing NGFW customer requires direct internet access offload locally at each site, and IPSec connectivity to all branches over public internet. One requirement is that no new SD-WAN hardware be introduced to the environment.
What is the best solution for the customer?

Answer options

• A. Configure a remote network on PAN-OS
• B. Upgrade to a PAN-OS SD-WAN subscription
• C. Configure policy-based forwarding
• D. Deploy Prisma SD-WAN with Prisma Access

Correct answer: B

Explanation

The correct answer is B because upgrading to a PAN-OS SD-WAN subscription allows the customer to utilize existing hardware and features for SD-WAN functionality without introducing new devices. Options A, C, and D do not provide a solution that meets the customer's requirement for maintaining the current hardware setup while facilitating direct internet access and IPSec connectivity.