An administrator has configured the Palo Alto Networks NGFW's management interface to connect to the internet through a dedicated path that does not traverse back through the NGFW itself.
Which configuration setting or step will allow the firewall to get automatic application signature updates?
To allow the firewall to get automatic application signature updates when the management interface is configured to connect to the internet through a dedicated path, a service route will need to be configured. Without a specific service route, the updates may not be properly directed to the internet source, even if the management interface has internet access. This ensures that the correct path is used for reaching the update servers effectively.
Correct Answer: A You don’t need a service route. Those are only used when you are using an interface OTHER THAN the MGMT interface.
It clearly says the Mgmt interface has internet access, not through the firewall. The only thing to configure is the schedule for all dynamic updates.
A is correct. this is a good confusing question.
A：new document[ https://docs.paloaltonetworks.com/pan-os/10-2/pan-os-web-interface-help/device/device-dynamic-updates ]
One more example (like most of the PCNSX questions) of a malicious PANW test question. The answer seems to be "A" but it's tricky AF
A You don't need to configure a service route for management interfaces by default. But you need to create a scheduler for automatic updates
As mentioned by the other guys , service route is needed only if you will use a non-mgmt interface
A is correct = https://docs.paloaltonetworks.com/pan-os/8-0/pan-os-web-interface-help/device/device-dynamic-updates.html#idef12a8e2-9abb-48cd-851f-77b13eca01bb
A -- question has bad wording and unclear
A is the correct answer, see other comments. Updates will not happen automatically unless you schedule them: https://docs.paloaltonetworks.com/pan-os/10-0/pan-os-web-interface-help/panorama-web-interface/panorama-device-deployment/schedule-dynamic-content-updates.html Also note that there are recommended update intervals (this probably won't be on the test): https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClaECAS
for Application updates, you do not need a Threat Prevention license. C would have been the answer if updates for app and content were mentionned. So the only sensible answer is A
A is correct
A You don't need to configure a service route for management interfaces by default. But you need to create a scheduler for automatic updates
Answer: A
A is Correct
A is the correct answer as management interface has dedicated internet access!
Correct answer : A
A is the right answer, you don't need a service route here. and tha others does not have any sense