Palo Alto Networks Certified Strata Field Engineer (PCSFE) — Question 19

Which two components are required for Intelligent Traffic Offload (ITO) on a VM-Series firewall? (Choose two.)

Answer options

• A. PAN-OS 10.1 or later
• B. VM-Series plugin 2.1.0 or later
• C. VM-Series plugin 3.1.0 or later
• D. PAN-OS 9.1 or later

Correct answer: A, B

Explanation

The correct answers are A and B because Intelligent Traffic Offload (ITO) requires PAN-OS version 10.1 or later and the VM-Series plugin at least version 2.1.0. Options C and D are incorrect as they do not meet the specified versions needed for ITO functionality.