Palo Alto Networks System Engineer – Strata — Question 19
A packet that is already associated with a current session arrives at the firewall.
What is the flow of the packet after the firewall determines that it is matched with an existing session?
Answer options
- A. It is sent through the fast path because session establishment is not required. If subject to content inspection, it will pass through multiple content inspection engines before egress.
- B. It is sent through the slow path for further inspection. If subject to content inspection, it will pass through multiple content inspection engines before egress.
- C. It is sent through the slow path for further inspection. If subject to content inspection, it will pass through a single stream-based content inspection engines before egress.
- D. It is sent through the fast path because session establishment is not required. If subject to content inspection, it will pass through a single stream-based content inspection engine before egress.
Correct answer: D
Explanation
The correct answer is D because packets associated with existing sessions bypass session establishment and are processed through the fast path. In this scenario, only a single stream-based content inspection engine is utilized for any necessary content inspection, making options A, B, and C incorrect due to their references to multiple engines or slow path processing.