exam questions

Exam PCNSE All Questions

View all questions & answers for the PCNSE exam

Exam PCNSE topic 1 question 45 discussion

Actual exam question from Palo Alto Networks's PCNSE
Question #: 45
Topic #: 1
[All PCNSE Questions]

Refer to the exhibit.

Which will be the egress interface if the traffic's ingress interface is ethernet1/7 sourcing from 192.168.111.3 and to the destination 10.46.41.113?

  • A. ethernet1/6
  • B. ethernet1/3
  • C. ethernet1/7
  • D. ethernet1/5
Show Suggested Answer Hide Answer
Suggested Answer: D 🗳️

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Narendragpt
Highly Voted 4 years ago
D is correct . https://docs.paloaltonetworks.com/pan-os/9-0/pan-os-admin/networking/configure-interfaces/virtual-wire-interfaces.html
upvoted 10 times
...
rolmok
Highly Voted 3 years, 4 months ago
Correct Ans: D. Virtual Wire would not check the L3 routing information
upvoted 9 times
...
PaloGod
Most Recent 2 months, 1 week ago
Selected Answer: B
I believe the correct answer is Ethernet1/3, and here’s why: While Virtual Wire (vWire) typically operates at Layer 2 and bridges traffic transparently (e.g., ethernet1/7 to ethernet1/5), the exhibit includes a routing table (show routing fib). This suggests the firewall is configured for Layer 3 routing in this scenario. 1. The routing table explicitly shows a default route (0.0.0.0/0) with a nexthop of 10.46.40.1 via ethernet1/3. 2. The mention of the source IP (192.168.111.3) further supports that routing decisions are being applied, which is not typical in a pure vWire setup. 3. This appears to be a hybrid configuration, where routing overrides the default vWire behavior for external traffic. The traffic ingressing on ethernet1/7 with a destination of 10.46.41.113 will egress via ethernet1/3, based on the routing table. This is consistent with Layer 3 routing logic.
upvoted 1 times
...
bing2021
9 months ago
Selected Answer: D
follow vwire output
upvoted 1 times
...
Marshpillowz
1 year, 2 months ago
Selected Answer: D
D is correct here
upvoted 1 times
...
sov4
1 year, 8 months ago
Selected Answer: D
Question is on the exam. I got this question a few weeks ago... July 2023.
upvoted 1 times
...
sridot
1 year, 10 months ago
If it's "sourcing from 192.168.111.3" wouldn't that be a source of e6, thus not applying to the vwire?
upvoted 1 times
sridot
1 year, 10 months ago
Apologies, I was misreading things and was worried that there may have been a misprint in the question. D is definitely correct.
upvoted 1 times
...
...
1Adrian1
3 years ago
B is the correct answer, based on the fib output
upvoted 2 times
secdaddy
2 years, 6 months ago
it's a virtual wire = no fib lookup
upvoted 1 times
...
...
confusion
3 years, 1 month ago
Selected Answer: D
It's a vwyre: in 1/7, out 1/5 and vice versa.
upvoted 7 times
...
rocioha
4 years ago
Sorry I was wrong, because of the virtual wire is the 1/5
upvoted 2 times
...
rocioha
4 years ago
B is correct because of the destination and next hoop
upvoted 1 times
Raikin
3 years, 12 months ago
No, because it is virtual wire interface, not layer 3 int.
upvoted 1 times
...
vj77
3 years, 11 months ago
When an interface is configured as virtual wire, the routing table is not checked by the FW. If it enters one interface, it has to exit the other interface of the virtual wire, there is no exception.
upvoted 10 times
...
...
shetoshandasa
4 years ago
Correct Answer
upvoted 1 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago