NGFW-ENGINEER practice questions 21–30

1. Question 21 · 107 in bank

   Which statement applies to the relationship between Panorama-pushed Security policy and local firewall Security policy?

   • AWhen a policy match is found in a local firewall policy, if any Panorama shared post-rule is configured, it will still be evaluated.
   • BLocal firewall rules are evaluated after Panorama pre-rules and before Panorama post-rules.
   • CPanorama post-rules can be configured to be evaluated before local firewall policy for the purpose of troubleshooting.
   • DThe order of policy evaluation can be configured differently in different device groups.

   Show answer

   Answer: B

   Next question

2. Question 22 · 107 in bank

   Which networking technology can be configured on Layer 3 interfaces but not on Layer 2 interfaces?

   • ADDNS
   • BLink Duplex
   • CNetFlow
   • DLLDP

   Show answer

   Answer: A

   Next question

3. Question 23 · 107 in bank

   What must be configured before a firewall administrator can define policy rules based on users and groups?

   • AUser Mapping profile
   • BAuthentication profile
   • CGroup mapping settings
   • DLDAP Server profile

   Show answer

   Answer: C

   Next question

4. Question 24 · 107 in bank

   What is a result of enabling split tunneling in the GlobalProtect portal configuration with the “Both Network Traffic and DNS” option?

   • AIt specifies when the secondary DNS server is used for resolution to allow access to specific domains that are not managed by the VPN.
   • BIt allows users to access internal resources when connected locally and external resources when connected remotely using the same FQDN.
   • CIt allows devices on a local network to access blocked websites by changing which DNS server resolves certain domain names.
   • DIt specifies which domains are resolved by the VPN-assigned DNS servers and which domains are resolved by the local DNS servers.

   Show answer

   Answer: D

   Next question

5. Question 25 · 107 in bank

   According to dynamic updates best practices, what is the recommended threshold value for content updates in a mission- critical network?

   • A8 hours
   • B16 hours
   • C32 hours
   • D48 hours

   Show answer

   Answer: D

   Next question

6. Question 26 · 107 in bank

   Which type of firewall resource can be assigned when configuring a new firewall virtual system (VSYS)?

   • ACPU
   • BSessions limit
   • CMemory
   • DSecurity profile limit

   Show answer

   Answer: B

   Next question

7. Question 27 · 107 in bank

   Which forwarding methods can be used on the Objects tab when configuring the Log Forwarding profile?

   • APanorama, syslog, email
   • BSyslog, HTTP, NetFlow
   • CPanorama, ADEM, syslog
   • DSNMP, HTTP, RADIUS

   Show answer

   Answer: A

   Next question

8. Question 28 · 107 in bank

   In a hybrid cloud deployment, what is the primary function of Ansible in managing Palo Alto Networks NGFWs?

   • AIt provides a web interface for managing NGFW hardware clusters.
   • BIt enables centralized log collection and correlation for NGFWs.
   • CIt facilitates dynamic updates to NGFW threat databases.
   • DIt automates NGFW policy updates and configurations through playbooks.

   Show answer

   Answer: D

   Next question

9. Question 29 · 107 in bank

   Select 2

   Palo Alto Networks NGFWs use SSL/TLS profiles to secure which two types of connections? (Choose two.)

   • ANAT tables
   • BUser Authentication
   • CGlobalProtect Gateways
   • DGlobalProtect Portal

   Show answer

   Answer: CD

   Next question

10. Question 30 · 107 in bank

    How does a Palo Alto Networks firewall choose the best route when it receives routes for the same destination from different routing protocols?

    • AThe route that was received first will be entered into the forwarding table, and all subsequent routes will be rejected.
    • BIt will attempt to load balance the traffic across all routes.
    • CIt compares the administrative distance and chooses the one with the highest value.
    • DIt compares the administrative distance and chooses the one with the lowest value.

    Show answer

    Answer: D

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

NGFW-ENGINEER practice, question 21. 107 questions available.