PCNSA Device Management and Services Practice Question
A firewall uses an external SMTP server for email alerts. The SMTP server is reachable via a specific virtual router and interface. What must be configured to ensure the firewall uses the correct path to reach the SMTP server?
⚠ Common exam trap
Many exam-takers assume a static route is sufficient, but without a service route, the firewall's management plane will use the default management interface and its associated routing table, which may not have a path to the SMTP server.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Configure a service route for SMTP.
Service routes in Palo Alto Networks firewalls explicitly define the source interface and virtual router used for outbound management traffic, such as SMTP email alerts. By configuring a service route for SMTP, the firewall ensures that email alerts are sent via the specified virtual router and interface, overriding the default management plane routing behavior.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Ensure the SMTP server is in the same zone as the management interface.
Why it's wrong here
Incorrect: The zone of the SMTP server is not directly relevant for the firewall's source interface selection.
- ✗
Configure an SNMP trap destination.
Why it's wrong here
Incorrect: SNMP is unrelated to SMTP.
- ✓
Configure a service route for SMTP.
Why this is correct
Correct: Service routes define the source interface and IP used by management services like SMTP.
- ✗
Add a static route for the SMTP server.
Why it's wrong here
Incorrect: Static route helps routing but does not set the source interface for the management service.
Go deeper
Related to this question
About these practice questions
One of 516 original PCNSA practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This PCNSA practice question is part of Courseiva's free Palo Alto Networks certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the PCNSA exam.