An administrator can successfully log in to a firewall's web-based management interface, but hosts cannot reach external destinations through the firewall. Which statement explains why management access does not guarantee external forwarding?

### What a good answer covers - Management access and forwarded data traffic use different firewall functions, so a working browser session does not prove Internet routing works. - Verify ethernet1/1 is configured as the Internet Layer 3 interface with the intended static address. - Verify the virtual router includes the required interfaces and has a `0.0.0.0/0` route through ethernet1/1 to the assigned next hop. - Confirm that the configuration was committed so the settings are active. ### Terms - **Layer 3**: The network layer where IP routing occurs. - **Next hop**: The gateway to which a packet is sent on its next leg. ### Remember Successful management access does not prove that the firewall's data plane has a working route.