PCNSE practice question 5 of 35

How should an administrator enable the Advance Routing Engine on a Palo Alto Networks firewall?

Full set: 377 questions

Domain Deploy and Configure

Answer options
A: Enable Advanced Routing Engine in Device > Setup > Session > Session Settings, then commit and reboot.
B: Enable Advanced Routing in Network > Virtual Routers > Router Settings > General, then commit and reboot.
C: Enable Advanced Routing in General Settings of Device > Setup > Management, then commit and reboot. Correct answer
D: Enable Advanced Routing in Network > Virtual Routers > Redistribution Profiles and then commit.
Correct Answer:
C. Enable Advanced Routing in General Settings of Device > Setup > Management, then commit and reboot.
Explanation

According to PAN-OS documentation, the Advanced Routing Engine is a global firewall setting. It is enabled from Device > Setup > Management > General Settings by checking “Enable Advanced Routing Engine,” followed by a commit and firewall reboot. Only after this global toggle is on can individual virtual-router objects use the new engine. Therefore, option C is the only path that actually turns the feature on.

Why Incorrect

A. No “Advanced Routing” control exists under Device > Setup > Session; path is irrelevant.
B. Router-level “Forwarding Mode” appears only after the engine is enabled globally; it cannot enable the engine itself.
D. Redistribution Profiles control route-redistribution, not engine selection; path contains no such setting.

References

1. Palo Alto Networks, “Enable the Advanced Routing Engine,” PAN-OS 10.2 Administrator’s Guide, Routing chapter, step 1 (Device > Setup > Management > General Settings) – https://docs.paloaltonetworks.com/pan-os/10-2/pan-os-admin/route/advanced-routing/enable-advanced-routing-engine

2. Palo Alto Networks, “Advanced Routing Engine Overview,” PAN-OS 11.0 New Features Guide, section “Activate the Advanced Routing Engine,” bullets 1–2 (same GUI path and reboot requirement).

Scroll to Top