You must configure which firewall feature to enable a data-plane interface to submit DNS queries on behalf of the control plane?
You must configure which firewall feature to enable a data-plane interface to submit DNS queries on behalf of the control plane?
To enable a data-plane interface to submit DNS queries on behalf of the control plane, you need to configure a service route. By default, the firewall uses the management interface for accessing external services such as DNS. Configuring a service route allows you to specify a data port to route these communications, thereby offloading the task from the management interface to the data plane.
i think its D
Correct answer is D
The firewall uses the management (MGT) interface by default to access external services, such as DNS servers, external authentication servers, as well as various Palo Alto Networks services, including software, URL updates, licenses, external dynamic lists (EDLs), and AutoFocus. An alternative to using the MGT interface is to configure a data port (a regular interface) to access these services. The path from the interface to the service on a server is known as a service route. When configured as a DNS proxy, the firewall is an intermediary between DNS clients and servers; it acts as a DNS server itself by resolving queries from its DNS proxy cache. If it doesn’t find the domain name in its DNS proxy cache, the firewall searches for a match to the domain name among the entries in the specific DNS proxy object (on the interface on which the DNS query arrived). The firewall forwards the query to the appropriate DNS server based on the match results. If no match is found, the firewall uses default DNS servers.
The answer is C. DNS Proxy. https://docs.paloaltonetworks.com/pan-os/10-0/pan-os-admin/networking/dns/use-case-3-firewall-acts-as-dns-proxy-between-client-and-server.html
C indeed. A DNS Proxy on the firewall is configured to act as the DNS server for the hosts that reside on the tenant’s network connected to the firewall interface "In such a scenario, the firewall performs DNS resolution on its dataplane."
The answer is D Quoting https://www.paloaltonetworks.com/content/dam/pan/en_US/assets/pdf/datasheets/education/pcnsa-study-guide-latest.pdf " Service routes are used so that the communication between the firewall and servers goes through the data ports on the data plane."
D is correct
Refer to page 19 on PCNSA study guide April 2022
DNS resolution, and generally external reachability, is routed by default on the control plane (MGT interface). Service route feature allows to change the default routing behaviour by setting the data plane as the routing path.
The correct answer is D - Ref PCNSA Study guide 2022 - P44
D is correct PAN-OS 10 -> Device -> Setup -> Services -> Service Features -> Service Route Configuration
PAN-OS 10 -> Device -> Setup -> Services -> Service Features -> Service Route Configuration
By default, the firewall uses the management (MGT) interface to access external services, such as DNS servers, external authentication servers, Palo Alto Netw orks services such as soft ware, URL updates, licenses, and AutoFocus. An alternative to using the MGT interface is configuring a data port (a standard interface) to access these services. The path from the interface to th e service on a server is aservice route. [Palo Alto Networks]
D. Service Route is the correct answer.
A DNS Proxy on the firewall is configured to act as the DNS server for the hosts that reside on the tenant’s network connected to the firewall interface "In such a scenario, the firewall performs DNS resolution on its dataplane." Ref: https://docs.paloaltonetworks.com/pan-os/10-0/pan-os-admin/networking/dns/use-case-3-firewall-acts-as-dns-proxy-between-client-and-server
That's correct for dataplane interfaces, control plane (or management plane). By default uses it's interface to process DNS queries, unless you configure Service Routes. Answer should be D
D is the correct answer. https://docs.paloaltonetworks.com/pan-os/9-1/pan-os-admin/networking/service-routes
service route is the actual name.
Answer D is Correct