Palo Alto Networks PSE-Prisma-Pro-24 Exam - Topic 2 Question 10 Discussion

Actual exam question for Palo Alto Networks's PSE-Prisma-Pro-24 exam

Question #: 10
Topic #: 2

An administrator deploys a VM-Series firewall into Amazon Web Services. Which attribute must be disabled on the data-plane elastic network interface for the instance to handle traffic that is not destined to its own IP address?

Asecurity group

Btags

Celastic ip address

Dsource/destination checking

Show Suggested Answer

Suggested Answer: D

https://docs.paloaltonetworks.com/vm-series/8-1/vm-series-deployment/set-up-the-vm-series-firewall-on-aws/deploy-the-vm-series-firewall-on-aws/launch-the-vm-series-firewall-on-aws.html

by Tracey at Nov 23, 2025, 07:29 PM

Limited Time Offer

25%

Off

Get Premium PSE-Prisma-Pro-24 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Karl

1 day ago

Surprised this is even a question, it’s pretty basic!

upvoted 0 times

...

Jerlene

6 days ago

No way, it’s definitely D.

upvoted 0 times

...

Margret

12 days ago

Wait, are you sure? I thought it was A) security group.

upvoted 0 times

...

Ashton

17 days ago

D all the way. Disabling source/destination checking is like unlocking the door for the firewall to let traffic in. Duh!

upvoted 0 times

...

Nidia

22 days ago

D, no doubt about it. Can't have the firewall dropping traffic just because it's not destined for its own IP.

upvoted 0 times

...

Tina

27 days ago

D is the way to go. Gotta turn off that source/destination checking or the firewall won't be able to do its job.

upvoted 0 times

...

Stephaine

1 month ago

I’m leaning towards D) source/destination checking, but I wish I had reviewed more about how it interacts with elastic network interfaces.

upvoted 0 times

...

Jaime

1 month ago

I’m a bit confused about the role of security groups in this context. Do they affect how the traffic is handled?

upvoted 0 times

...

Elina

1 month ago

I remember a practice question about network interfaces, and I think disabling source/destination checking was the answer there too.

upvoted 0 times

...

Jose

2 months ago

Alright, I think I've got this. The VM-Series firewall needs to be able to handle traffic not destined for its own IP, so the "source/destination checking" attribute needs to be disabled. I'm confident that's the right answer.

upvoted 0 times

...

Alba

2 months ago

I've got a strategy - I'll eliminate the options that don't seem relevant, then focus in on understanding source/destination checking. That should help me narrow it down.

upvoted 0 times

...

Minna

2 months ago

I'm a bit confused on this one. Is the "source/destination checking" something specific to the VM-Series firewall, or is it a general AWS networking concept? I'll need to review that before answering.

upvoted 0 times

...

Katina

2 months ago

Totally agree, that’s the right one!

upvoted 0 times

...

Major

2 months ago

It's D) source/destination checking.

upvoted 0 times

...

Elbert

2 months ago

I think it might be related to source/destination checking, but I'm not entirely sure why that matters for the firewall.

upvoted 0 times

...

Kallie

3 months ago

Definitely D. Disabling source/destination checking is crucial for the VM-Series firewall to function properly in AWS.

upvoted 0 times

...

Izetta

3 months ago

D) source/destination checking is the correct answer. You need to disable this to allow the VM-Series firewall to handle traffic not destined for its own IP.

upvoted 0 times

...

Carlee

3 months ago

Okay, let's see. I think the key here is understanding what the "source/destination checking" attribute does on the network interface. That's probably the key to solving this.

upvoted 0 times

...

Earleen

3 months ago

Hmm, this one seems tricky. I'll need to think carefully about the networking concepts involved with the VM-Series firewall in AWS.

upvoted 0 times

...