Exam PCNSE All QuestionsBrowse all questions from this exam
Question 244

What is the function of a service route?

    Correct Answer: D

    The function of a service route is to provide access to external services, such as DNS servers, external authentication servers, or Palo Alto Networks services. This explanation aligns with the question by clarifying the purpose and use of service routes, which are critical for facilitating the connections necessary for network operations.

Discussion
west33637Option: D

The answer is D. They asked what is the function? Not how does it work. But, what is the function. (A) does not describe the function. Look at the documentation, "The firewall uses the management (MGT) interface by default to access external services, such as DNS servers, external authentication servers, Palo Alto Networks® services such as software, URL updates, licenses and AutoFocus. An ALTERNATIVE to using the MGT interface is to configure a data port (a regular interface) to access these services." -https://docs.paloaltonetworks.com/pan-os/10-1/pan-os-networking-admin/service-routes/service-routes-overview#id69ef535a-d5b0-4c79-bb7f-1302a438e7c5

Eluis007

Why do you ignore this "Customer Support Portal"? How can service routes be used to "provide access to CSP"???

mercysayno765Option: A

First Paragraph, Last statement "The service packets exit the firewall on the port assigned for the external service and the server sends its response to the configured source interface and source IP address." https://docs.paloaltonetworks.com/pan-os/10-1/pan-os-networking-admin/service-routes/service-routes-overview#id69ef535a-d5b0-4c79-bb7f-1302a438e7c5

sov4Option: A

It's A. D almost got me except you dont access the Customer Support Portal via a service route. That's via a web browser smh.

PochexOption: A

Answer A I can access the CSP even though I have no firewall in use. D is not the correct one.

lildevil

The answer D does say "Like the customer support portal" doesn't say it's the only thing...and the FW does contact that for license and if the case maybe ZTP for device certificate. Having said that answer A definitely comes verbatim from the documentation. Both are seemingly accurate.

Frightened_AcrobatOption: A

Trick question. D lists Customer Support Portal at the end. This is not a function of Service Routes. D cannot be correct.

UFanatOption: A

https://docs.paloaltonetworks.com/pan-os/10-1/pan-os-networking-admin/service-routes/service-routes-overview#id69ef535a-d5b0-4c79-bb7f-1302a438e7c5 "The service packets exit the firewall on the port assigned for the external service and the server sends its response to the configured source interface and source IP address."

GivemeMoneyOption: A

A is correct.

mysteryzjokerOption: A

answer is A, not D. You don' t need a service route to access the support portal you just access via a browser.

jeremykebirOption: D

For the peoples who have still doubt about the answer it should be D. What is the function of a service route? A. The service packets exit the firewall on the port assigned for the external service. The server sends its response to the configured source interface and source IP address. D. Service routes provide access to external services, such as DNS servers, external authentication servers or Palo Alto Networks services like the Customer Support Portal. The question is about "service routes" and no "service packet" in the answer A that doesn't exist :D

0d2fdfaOption: A

Option A is correct Below option is wrong because although service routes provide access to external services but they are not configured by default. They are to be used in case management interface is not to be used. D. Service routes provide access to external services, such as DNS servers, external authentication servers or Palo Alto Networks services like the Customer Support Portal.

0d2fdfa

Actually just ignore that. The correct option is D because the question is about the "Function" Option A is not a function. D seems to be a more specific response to the question.

ThunnuOption: A

Answer is A https://docs.paloaltonetworks.com/pan-os/10-1/pan-os-networking-admin/service-routes/service-routes-overview#id69ef535a-d5b0-4c79-bb7f-1302a438e7c5

XuziOption: A

The service packets exit the firewall on the port assigned for the external service and the server sends its response to the configured source interface and source IP address.

[Removed]Option: D

function not how it works

zemijanOption: D

Is D. The firewall uses the management (MGT) interface by default to access external services, such as DNS servers, external authentication servers ... https://docs.paloaltonetworks.com/pan-os/9-1/pan-os-admin/networking/service-routes

mic_micOption: A

In the real exam the answer is: Service route defines the source interface which must used by the firewall when generating the specific traffic

TAKUM1yOption: A

https://docs.paloaltonetworks.com/pan-os/10-1/pan-os-networking-admin/service-routes/service-routes-overview#id69ef535a-d5b0-4c79-bb7f-1302a438e7c5

NLTOption: A

The firewall uses the management (MGT) interface by default to access external services, such as DNS servers, external authentication servers, Palo Alto Networks services such as software, URL updates, licenses and AutoFocus. An alternative to using the MGT interface is to configure a data port (a regular interface) to access these services. The path from the interface to the service on a server is known as a service route. The service packets exit the firewall on the port assigned for the external service and the server sends its response to the configured source interface and source IP address.