Without changing the existing access to the management interface, how can the engineer fulfill this request?

An engineer needs to permit XML API access to a firewall for automation on a network segment that is routed through a Layer 3 subinterface on a Palo Alto Networks firewall. However, this network segment cannot access the dedicated management interface due to the Security policy.

Without changing the existing access to the management interface, how can the engineer fulfill this request?
A . Specify the subinterface as a management interface in Setup > Device > Interfaces.
B. Enable HTTPS in an Interface Management profile on the subinterface.
C. Add the network segment’s IP range to the Permitted IP Addresses list
D. Configure a service route for HTTP to use the subinterface

View Answer

Answer: B