Palo Alto Networks Certified Network Security Engineer (PCNSE) — Question 339

A firewall administrator needs to check which egress interface the firewall will use to route the IP 10.2.5.3.

Which command should they use?

Answer options

• A. test routing fib-lookup ip 10.2.5.0/24 virtual-router default
• B. test routing route ip 10.2.5.3
• C. test routing route ip 10.2.5.3 virtual-router default
• D. test routing fib-lookup ip 10.2.5.3 virtual-router default

Correct answer: D

Explanation

The correct command is D, as it specifically checks the Forwarding Information Base (FIB) for the IP address 10.2.5.3 in the default virtual router, which is necessary for determining the egress interface. Options A and C use the wrong IP address and do not specifically check the FIB, while option B does not reference the virtual router, which is essential for accurate routing information.