Palo Alto Networks Certified Network Security Engineer (PCNSE) — Question 9

An administrator needs to upgrade a Palo Alto Networks NGFW to the most current version of PAN-OSֲ® software. The firewall has internet connectivity through an Ethernet interface, but no internet connectivity from the management interface. The Security policy has the default security rules and a rule that allows all web- browsing traffic from any to any zone.
What must the administrator configure so that the PAN-OSֲ® software can be upgraded?

Answer options

• A. Security policy rule
• B. CRL
• C. Service route
• D. Scheduler

Correct answer: C

Explanation

The correct answer is C, Service route, because it allows the firewall to use the specified interface for internet-bound traffic, which is essential for downloading the software upgrade. The other options, such as A (Security policy rule) and B (CRL), do not pertain to directing upgrade traffic, while D (Scheduler) is unrelated to connectivity configurations.