Free Palo Alto Networks NGFW-Engineer Exam Questions
Try our Free Demo Practice Tests for Comprehensive NGFW-Engineer Exam Preparation
-
Palo Alto Networks NGFW-Engineer Exam Questions
-
Provided By: Palo Alto Networks
- Exam: Palo Alto Networks Next-Generation Firewall Engineer
- Certification: Palo Alto Networks Certified Software Firewall Engineer
-
Total Questions: 50
-
Updated On: Apr 19, 2025
-
Rated: 4.9 |
-
Online Users: 100
-
Question 1
-
Which configuration in the LACP tab will enable pre-negotiation for an Aggregate Ethernet (AE)
interface on a Palo Alto Networks high availability (HA) active/passive pair?
Answer: C
-
Which configuration in the LACP tab will enable pre-negotiation for an Aggregate Ethernet (AE)
interface on a Palo Alto Networks high availability (HA) active/passive pair?
-
Question 2
-
An NGFW engineer is configuring multiple Layer 2 interfaces on a Palo Alto Networks firewall, and all
interfaces must be assigned to the same VLAN. During initial testing, it is reported that clients
located behind the various interfaces cannot communicate with each other.
Which action taken by the engineer will resolve this issue?
Answer: B
-
An NGFW engineer is configuring multiple Layer 2 interfaces on a Palo Alto Networks firewall, and all
interfaces must be assigned to the same VLAN. During initial testing, it is reported that clients
located behind the various interfaces cannot communicate with each other.
Which action taken by the engineer will resolve this issue?
-
Question 3
-
Which configuration step is required when implementing a new self-signed root certificate authority
(CA) certificate for SSL decryption on a Palo Alto Networks firewall?
Answer: A
-
Which configuration step is required when implementing a new self-signed root certificate authority
(CA) certificate for SSL decryption on a Palo Alto Networks firewall?
-
Question 4
-
An administrator plans to upgrade a pair of active/passive firewalls to a new PAN-OS release. The
environment is highly sensitive, and downtime must be minimized.
What is the recommended upgrade process for minimal disruption in this high availability (HA)
scenario?
Answer: A
-
An administrator plans to upgrade a pair of active/passive firewalls to a new PAN-OS release. The
environment is highly sensitive, and downtime must be minimized.
What is the recommended upgrade process for minimal disruption in this high availability (HA)
scenario?
-
Question 5
-
Which statement applies to the relationship between Panorama-pushed Security policy and local
firewall Security policy?
Answer: B
-
Which statement applies to the relationship between Panorama-pushed Security policy and local
firewall Security policy?