Palo Alto Networks PSE-PrismaCloud Exam - Topic 1 Question 42 Discussion

Actual exam question for Palo Alto Networks's PSE-PrismaCloud exam

Question #: 42
Topic #: 1

An administrator has deployed an AWS transit gateway and used multiple VPC spokes to segregate a multi-tier application. The administrator also created a security VPC with multiple VM-Series NGFWs in an active/active deployment model via ECMP using Amazon Web Services VPN-based attachments.

What must be configured on the firewall to avoid asymmetric routing?

Asource address translation

Bdestination address translation

Cport address translation

Dsource and destination address translation

Show Suggested Answer

Suggested Answer: D

by Twana at Nov 15, 2022, 11:52 PM

Limited Time Offer

25%

Off

Get Premium PSE-PrismaCloud Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Vilma

4 months ago

Wait, why would you need both source and destination translation? That seems excessive!

upvoted 0 times

...

Lang

4 months ago

Not sure about that, sounds a bit off to me.

upvoted 0 times

...

Annmarie

4 months ago

I think destination address translation might work too, right?

upvoted 0 times

...

Chana

4 months ago

Definitely need source address translation for that!

upvoted 0 times

...

Gladys

4 months ago

Asymmetric routing can cause issues with stateful firewalls.

upvoted 0 times

...

Beula

5 months ago

I recall that using source address translation is often recommended to avoid issues, but I’m not sure if it’s the only thing needed in this scenario.

upvoted 0 times

...

Ressie

5 months ago

I’m a bit confused about the options. I thought both source and destination address translation could be necessary to prevent asymmetric routing, but I’m not certain.

upvoted 0 times

...

Martina

5 months ago

I think we practiced a similar question where we had to configure firewalls for routing. I feel like source address translation might be the right choice.

upvoted 0 times

...

Kirby

5 months ago

I remember we discussed asymmetric routing in class, but I'm not entirely sure which translation method to use here.

upvoted 0 times

...

Luisa

5 months ago

Okay, I've got this. The key is to focus on the information in the UE subscription, which is what the MME uses to assign the DCN.

upvoted 0 times

...

Rory

5 months ago

Okay, let me see... I'm pretty sure the "Resource" field is where the external attributes would be mapped, but I'll double-check the other options just to be sure.

upvoted 0 times

...

Tony

5 months ago

This looks like a tricky one. I'll need to carefully read through the question and options to figure out the right steps.

upvoted 0 times

...

Buddy

5 months ago

I'm leaning towards the Service Perimeter Guard pattern, but I'm worried about its effectiveness when it comes to handling the access levels correctly.

upvoted 0 times

...

Nieves

9 months ago

I'm going with D. Wouldn't want those packets taking a trip around the world and ending up back where they started, right?

upvoted 0 times

...

Flo

9 months ago

Definitely D. You can't have your packets going all over the place like a bunch of lost socks. Address translation is key to keeping things nice and tidy.

upvoted 0 times

Crissy

8 months ago

D) source and destination address translation

upvoted 0 times

...

Camellia

8 months ago

C) port address translation

upvoted 0 times

...

Tomas

8 months ago

B) destination address translation

upvoted 0 times

...

Glenn

8 months ago

A) source address translation

upvoted 0 times

...

Delisa

8 months ago

C) port address translation

upvoted 0 times

...

Herminia

8 months ago

B) destination address translation

upvoted 0 times

...

Buffy

9 months ago

A) source address translation

upvoted 0 times

...

Abel

10 months ago

Haha, asymmetric routing? More like 'a-symmetric' routing if you ask me. But in all seriousness, D is the way to go.

upvoted 0 times

Makeda

8 months ago

Definitely, D is the way to go to ensure proper routing with the firewall.

upvoted 0 times

...

Lettie

9 months ago

I agree, D is the correct choice to avoid asymmetric routing.

upvoted 0 times

...

Ronny

9 months ago

D) source and destination address translation

upvoted 0 times

...

Francine

9 months ago

C) port address translation

upvoted 0 times

...

Tuyet

9 months ago

B) destination address translation

upvoted 0 times

...

Tiffiny

9 months ago

A) source address translation

upvoted 0 times

...

Dominga

10 months ago

D seems like the right choice here. The firewall needs to translate both source and destination addresses to ensure the traffic flow is symmetric across the network.

upvoted 0 times

Bettina

10 months ago

D) source and destination address translation

upvoted 0 times

...

Louvenia

10 months ago

A) source address translation

upvoted 0 times

...

Reta

10 months ago

I'm not sure, but I think it might be D) source and destination address translation to avoid any routing issues.

upvoted 0 times

...

Horace

11 months ago

I think the answer is D. Source and destination address translation is necessary to avoid asymmetric routing in this scenario with a transit gateway and multiple VPC spokes.

upvoted 0 times