Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
Palo Alto Networks Certified Network Security Engineer (PCNSE) · Palo Alto Networks
Select one answer.
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
To implement a Palo Alto Networks Next-Generation Firewall (NGFW) between your DMZ and Core network while ensuring EIGRP routing continues to function, you need an interface type that allows the routing protocol to pass through without requiring the firewall to support EIGRP directly. Given that PAN-OS does not natively support EIGRP, the best option is likely Virtual Wire interfaces, which operate transparently and let EIGRP traffic flow as if the firewall isn’t there.
The correct answer is: **D. Layer 3 interfaces, but configuring EIGRP on the attached virtual router** ### Key Configuration Steps: 1. Assign **Layer 3 interfaces** to zones (e.g., DMZ and Core). 2. Enable **EIGRP** in the Virtual Router and advertise networks.
The correct answer is: **D. Layer 3 interfaces, but configuring EIGRP on the attached virtual router** ### Explanation: To support **EIGRP routing** between the DMZ and Core networks on a Palo Alto NGFW: 1. **Layer 3 interfaces** must be used (EIGRP is a Layer 3 routing protocol). 2. EIGRP is configured in the **Virtual Router**, not on individual interfaces.