Palo Alto Networks Certified Network Security Engineer Practice Mode

Community Discussion

Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.

• Chose B1

  B is the only answer that is correct, but its not required. When configuring a VLAN interface for a Layer 2 Ethernet port on a Palo Alto firewall, the two mandatory options are: Security Zone: This is required to define the security policies and control traffic between different zones. VLAN: You need to assign the interface to a VLAN to segment the network and manage traffic within that VLAN

• Chose AB1

  Correct answer is clear to me and it is A & B because when you want to configure that kind of interface the GUI ask for VLAN, VR and Security zone so in summary according to the available answers those ones would be the correct ones

• 1

  To configure a VLAN interface for a Layer 2 Ethernet port, the two mandatory options you need to set are: A. Virtual router - This specifies which virtual router the VLAN interface is associated with. The virtual router handles the routing of traffic entering and leaving the VLAN. B. Security zone - This option assigns the VLAN interface to a specific security zone. Security zones are used to control and manage traffic based on the security policies defined within the firewall. Options C (ARP entries) and D (Netflow Profile) are not mandatory for configuring a VLAN interface. ARP entries are automatically managed by the device as needed, and a Netflow Profile is related to traffic monitoring, not a basic configuration requirement for setting up a VLAN interface.