Skip to content

Arrange the steps in the correct order to enable and test ICMP ping responses on a Palo Alto Networks firewall Layer 3 interface, starting with profile configuration.

Answer

Create an Interface Management Profile with Ping enabled, Assign the Interface Management Profile to the Layer 3 interface, Commit the candidate configuration to the running configuration, Send an ICMP echo request from an adjacent host to verify reachability

Explanation

### The order 1. **Configure the Layer 3 interfaces with their network addresses**: routing and zone mapping require the relevant interfaces to exist as configured network interfaces. 2. **Add the interfaces and default route to the virtual router**: the firewall needs its routing context and Internet next hop. 3. **Create zones and map interfaces to them**: zones provide interface groupings for security-policy decisions. 4. **Create and assign the Allow-ping interface-management profile, then commit**: this permits the selected interface service and applies the changes. 5. **Test reachability to firewall interfaces from the hosts**: testing follows configuration and commit. ### Terms - **Layer 3**: The network layer where IP routing occurs. ### Remember Configure interfaces and routing before testing the committed management access.

Related Questions

Want to practice more questions like this?

Join myBenkio free and practice past questions for your Nigerian university courses with AI explanations for every answer.

Start Practicing Free