U.S. Independence Day Deal! Unlock 25% OFF Today – Limited-Time Offer - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions
Mail Us support@pass4success.com
Location US
Mob_nav_barsMENU

Palo Alto Networks PSE-PrismaCloud Exam - Topic 1 Question 42 Discussion

An administrator has deployed an AWS transit gateway and used multiple VPC spokes to segregate a multi-tier application. The administrator also created a security VPC with multiple VM-Series NGFWs in an active/active deployment model via ECMP using Amazon Web Services VPN-based attachments.What must be configured on the firewall to avoid asymmetric routing?
D) source and destination address translation
A) source address translation
B) destination address translation
C) port address translation

Palo Alto Networks PSE-PrismaCloud Exam - Topic 1 Question 42 Discussion

Actual exam question for Palo Alto Networks's PSE-PrismaCloud exam
Question #: 42
Topic #: 1
[All PSE-PrismaCloud Questions]

An administrator has deployed an AWS transit gateway and used multiple VPC spokes to segregate a multi-tier application. The administrator also created a security VPC with multiple VM-Series NGFWs in an active/active deployment model via ECMP using Amazon Web Services VPN-based attachments.

What must be configured on the firewall to avoid asymmetric routing?

Show Suggested Answer Hide Answer
Suggested Answer: D

by Twana at Nov 15, 2022, 11:52 PM

Limited Time Offer

25%

Off

Get Premium PSE-PrismaCloud Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

0/2000 characters
Submit Cancel
Vilma
8 months ago
Wait, why would you need both source and destination translation? That seems excessive!
upvoted 0 times
...
Lang
8 months ago
Not sure about that, sounds a bit off to me.
upvoted 0 times
...
Annmarie
8 months ago
I think destination address translation might work too, right?
upvoted 0 times
...
Chana
8 months ago
Definitely need source address translation for that!
upvoted 0 times
...
Gladys
8 months ago
Asymmetric routing can cause issues with stateful firewalls.
upvoted 0 times
...
Beula
8 months ago
I recall that using source address translation is often recommended to avoid issues, but I’m not sure if it’s the only thing needed in this scenario.
upvoted 0 times
...
Ressie
8 months ago
I’m a bit confused about the options. I thought both source and destination address translation could be necessary to prevent asymmetric routing, but I’m not certain.
upvoted 0 times
...
Martina
9 months ago
I think we practiced a similar question where we had to configure firewalls for routing. I feel like source address translation might be the right choice.
upvoted 0 times
...
Kirby
9 months ago
I remember we discussed asymmetric routing in class, but I'm not entirely sure which translation method to use here.
upvoted 0 times
...
Luisa
9 months ago
Okay, I've got this. The key is to focus on the information in the UE subscription, which is what the MME uses to assign the DCN.
upvoted 0 times
...
Rory
9 months ago
Okay, let me see... I'm pretty sure the "Resource" field is where the external attributes would be mapped, but I'll double-check the other options just to be sure.
upvoted 0 times
...
Tony
9 months ago
This looks like a tricky one. I'll need to carefully read through the question and options to figure out the right steps.
upvoted 0 times
...
Buddy
9 months ago
I'm leaning towards the Service Perimeter Guard pattern, but I'm worried about its effectiveness when it comes to handling the access levels correctly.
upvoted 0 times
...
Nieves
1 year ago
I'm going with D. Wouldn't want those packets taking a trip around the world and ending up back where they started, right?
upvoted 0 times
...
Flo
1 year ago
Definitely D. You can't have your packets going all over the place like a bunch of lost socks. Address translation is key to keeping things nice and tidy.
upvoted 0 times
Crissy
11 months ago
D) source and destination address translation
upvoted 0 times
...
Camellia
12 months ago
C) port address translation
upvoted 0 times
...
Tomas
12 months ago
B) destination address translation
upvoted 0 times
...
Glenn
1 year ago
A) source address translation
upvoted 0 times
...
Delisa
1 year ago
C) port address translation
upvoted 0 times
...
Herminia
1 year ago
B) destination address translation
upvoted 0 times
...
Buffy
1 year ago
A) source address translation
upvoted 0 times
...
...
Abel
1 year ago
Haha, asymmetric routing? More like 'a-symmetric' routing if you ask me. But in all seriousness, D is the way to go.
upvoted 0 times
Makeda
1 year ago
Definitely, D is the way to go to ensure proper routing with the firewall.
upvoted 0 times
...
Lettie
1 year ago
I agree, D is the correct choice to avoid asymmetric routing.
upvoted 0 times
...
Ronny
1 year ago
D) source and destination address translation
upvoted 0 times
...
Francine
1 year ago
C) port address translation
upvoted 0 times
...
Tuyet
1 year ago
B) destination address translation
upvoted 0 times
...
Tiffiny
1 year ago
A) source address translation
upvoted 0 times
...
...
Dominga
1 year ago
D seems like the right choice here. The firewall needs to translate both source and destination addresses to ensure the traffic flow is symmetric across the network.
upvoted 0 times
Bettina
1 year ago
D) source and destination address translation
upvoted 0 times
...
Louvenia
1 year ago
A) source address translation
upvoted 0 times
...
...
Reta
1 year ago
I'm not sure, but I think it might be D) source and destination address translation to avoid any routing issues.
upvoted 0 times
...
Horace
1 year ago
I think the answer is D. Source and destination address translation is necessary to avoid asymmetric routing in this scenario with a transit gateway and multiple VPC spokes.
upvoted 0 times
Cory
1 year ago
It's crucial to have both source and destination address translation to maintain consistent routing paths.
upvoted 0 times
...
Galen
1 year ago
Yes, that's correct. It ensures that traffic flows smoothly without any routing issues.
upvoted 0 times
...
Raul
1 year ago
I think it's important to configure both source and destination address translation on the firewall.
upvoted 0 times
...
Cecil
1 year ago
I agree, source and destination address translation is the key to avoid asymmetric routing.
upvoted 0 times
...
...
Skye
1 year ago
I agree with Delsie, source address translation would help avoid asymmetric routing.
upvoted 0 times
...
Delsie
1 year ago
I think the correct answer is A) source address translation.
upvoted 0 times
...

Save Cancel