Secure Network Administrationintermediate
Arrange the steps in the correct order to enable and test ICMP ping responses on a Palo Alto Networks firewall Layer 3 interface, starting with profile configuration.
Answer
Create an Interface Management Profile with Ping enabled, Assign the Interface Management Profile to the Layer 3 interface, Commit the candidate configuration to the running configuration, Send an ICMP echo request from an adjacent host to verify reachability
Explanation
### The order
1. **Configure the Layer 3 interfaces with their network addresses**: routing and zone mapping require the relevant interfaces to exist as configured network interfaces.
2. **Add the interfaces and default route to the virtual router**: the firewall needs its routing context and Internet next hop.
3. **Create zones and map interfaces to them**: zones provide interface groupings for security-policy decisions.
4. **Create and assign the Allow-ping interface-management profile, then commit**: this permits the selected interface service and applies the changes.
5. **Test reachability to firewall interfaces from the hosts**: testing follows configuration and commit.
### Terms
- **Layer 3**: The network layer where IP routing occurs.
### Remember
Configure interfaces and routing before testing the committed management access.
Related Questions
- Which statement best describes the protection a Virtual Private Network (VPN) provides?(basic)
- A VPN that encrypts traffic also guarantees that the applications on both endpoints are safe.(basic)
- Explain why a split-tunnel design can reduce central inspection, and identify the traffic affected.(advanced)
- Select ALL protection goals a VPN can support directly through the mechanisms described in the course.(intermediate)
- Compare remote-access and site-to-site VPN designs, including their endpoints and a suitable example of each.(basic)
Want to practice more questions like this?
Join myBenkio free and practice past questions for your Nigerian university courses with AI explanations for every answer.
Start Practicing Free