Exam PCNSE All QuestionsBrowse all questions from this exam
Question 463

Users have reported an issue when they are trying to access a server on your network. The requests aren't taking the expected route. You discover that there are two different static routes on the firewall for the server.

What is used to determine which route has priority?

    Correct Answer: C

    When determining which route has priority, the route with the lowest administrative distance is selected. Administrative distance is a measure of the trustworthiness of the source of a routing information. A lower administrative distance indicates a more preferred route. This is fundamental to networking as it helps in selecting between multiple routes to the same destination, ensuring that the most reliable route is used.

Discussion
javimOption: C

In this case, the answer is C, but not really, because of administrative distance is for differents routing protocols, in the case os two static routes is the metric.

0d2fdfaOption: A

First route. If the option of metric then it would be option C

0d2fdfaOption: C

I think they meant to say metric.

MarshpillowzOption: C

I think the answer is C here

MHy2kOption: A

A I checked in our production and noticed that the preferred path is the one which installed first.

basura

I also think A is correct. AD not evaluated when comparing same protocol installed routes. https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA14u000000oMNgCAM&lang=en_US%E2%80%A9

brian7857ffs45

There is a new question with a snippet of CLI route inputs that effectively ask this same question but instead of AD it is referencing the Metric value. So between two identical routes which will be installed comparing metrics.

Dranizz

That would make way more sense

dorf05Option: C

https://docs.paloaltonetworks.com/pan-os/9-1/pan-os-admin/networking/static-routes/static-route-overview#:~:text=By%20default%2C%20static,route%20is%20unavailable

JoyBoyMxOption: B

At the beginning I thought the answer was C, but it doesn't make sense because both routes are static routes. Then I found this: "If an interface is configured with more than one static route to a peer (the BFD session has the same source IP address and same destination IP address), a single BFD session automatically handles the multiple static routes. This behavior reduces BFD sessions. If the static routes have different BFD profiles, the profile with the smallest Desired Minimum Tx Interval takes effect." https://docs.paloaltonetworks.com/pan-os/9-1/pan-os-admin/networking/bfd/bfd-overview/bfd-for-static-routes So I believe the answer is B

[Removed]Option: B

https://docs.paloaltonetworks.com/pan-os/9-1/pan-os-admin/networking/static-routes/static-route-overview

[Removed]

C from the above link: By default, static routes have an administrative distance of 10. When the firewall has two or more routes to the same destination, it uses the route with the lowest administrative distance. By increasing the administrative distance of a static route to a value higher than a dynamic route, you can use the static route as a backup route if the dynamic route is unavailable.

Jared28

Updated link that still supports C as the more likely (same quote mentioned by the other reply): https://docs.paloaltonetworks.com/pan-os/11-0/pan-os-networking-admin/static-routes/static-route-overview

blahblah1234567890000Option: C

First its low administrative distance, then its chosen by higher metric. In this case they have the same administrative distance, it doesn't say if they have different metrics, assuming they do have the same metric then the answer would be B. I think the question and answers are not correct or worded properly. "By default, static routes have an administrative distance of 10. When the firewall has two or more routes to the same destination, it uses the route with the lowest administrative distance. By increasing the administrative distance of a static route to a value higher than a dynamic route, you can use the static route as a backup route if the dynamic route is unavailable." "You can configure a static route with a Bidirectional Forwarding Detection (BFD) profile so that if a BFD session between the firewall and the BFD peer fails, the firewall removes the failed static route from the RIB and FIB tables and uses an alternative route with a lower priority."

[Removed]Option: C

C is correct

MaryamkOption: C

It should be lower AD By default, static routes have an administrative distance of 10. When the firewall has two or more routes to the same destination, it uses the route with the lowest administrative distance. -https://docs.paloaltonetworks.com/pan-os/9-1/pan-os-admin/networking/static-routes/static-route-overview

duckduckgooo

Wouldn't this be C? On that link it says "When the firewall has two or more routes to the same destination, it uses the route with the lowest administrative distance. By increasing the administrative distance of a static route to a value higher than a dynamic route, you can use the static route as a backup route if the dynamic route is unavailable."

blahblah1234567890000

Technically the answer would be 'metric'