Palo Alto Networks Exam PCNSE Topic 12 Question 110 Discussion

Actual exam question for Palo Alto Networks's PCNSE exam

Question #: 110
Topic #: 12

Refer to the exhibit. Which will be the egress interface if the traffic's ingress interface is ethernet1/7 sourcing from 192.168.111.3 and to the destination 10.46.41.113?

Aethernet1/6

Bethernet1/3

Cethernet1/7

Dethernet1/5

Show Suggested Answer

Suggested Answer: D

In the second image, VW ports mentioned are 1/5 and 1/7. Hence it can not be a part of any other routing. So if any traffic coming as ingress from 1/7, it has to go out via 1/5.

The egress interface for the traffic with ingress interface ethernet1/7, source 192.168.111.3, and destination 10.46.41.113 will beethernet1/5.This is because the traffic will match the virtual wire with interfaces ethernet1/5 and ethernet1/7, which is configured to allow VLAN-tagged traffic with tags 10 and 201.The traffic will also match the security policy rule that allows traffic from zone Trust to zone Untrust, which are assigned to ethernet1/7 and ethernet1/5 respectively2.Therefore, the traffic will be forwarded to the same interface from which it was received, which is ethernet1/53.

by Noelia at Apr 06, 2025, 10:15 PM

Limited Time Offer

25%

Off

Get Premium PCNSE Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Currently there are no comments in this discussion, be the first to comment!