Halloween Sale Limited Time 70% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: merry71

Free Palo Alto Networks Next-Generation Firewall Engineer Practice Questions

Question # 31

An organization's Security policy states that for all outbound web traffic, the TCP session to the external web server must be established by the firewall, not the user's workstation. This requires configuring user web browsers to point to the firewall. Authentication is also required.

Which solution on a PA-Series firewall meets these specific needs?

Options:

A.  

Transparent proxy

B.  

Explicit proxy

C.  

GlobalProtect with User-ID

D.  

Decryption policy with Authentication Portal

Discussion 0
Question # 32

An administrator is troubleshooting a newly configured site-to-site VPN between a PAN-OS firewall and a third-party policy-based VPN gateway. The tunnel allows traffic between the first pair of configured subnets, but traffic to a newly added remote subnet is failing. The administrator has confirmed that routing and Security policies are correct.

What is the most likely cause of this issue?

Options:

A.  

A static route for the new subnet pointing to the tunnel interface is missing.

B.  

The Security policy for the new subnet must be placed above the existing VPN policy.

C.  

The new local and remote subnets are missing from the Proxy ID configuration.

D.  

The tunnel's maximum transmission unit (MTU) size must be increased to accommodate the new traffic.

Discussion 0
Question # 33

An NGFW engineer is configuring multiple Layer 2 interfaces on a Palo Alto Networks firewall, and all interfaces must be assigned to the same VLAN. During initial testing, it is reported that clients located behind the various interfaces cannot communicate with each other.

Which action taken by the engineer will resolve this issue?

Options:

A.  

Configure each interface to belong to the same Layer 2 zone and enable IP routing between them.

B.  

Assign each interface to the appropriate Layer 2 zone and configure a policy that allows traffic within the VLAN.

C.  

Assign each interface to the appropriate Layer 2 zone and configure Security policies for interfaces not assigned to the same

zone.

D.  

Enable IP routing between the interfaces and configure a Security policy to allow traffic between interfaces within the VLAN.

Discussion 0
Question # 34

For which two purposes is an IP address configured on a tunnel interface? (Choose two.)

Options:

A.  

Use of dynamic routing protocols

B.  

Tunnel monitoring

C.  

Use of peer IP

D.  

Redistribution of User-ID

Discussion 0
Question # 35

Which set of options is available for detailed logs when building a custom report on a Palo Alto Networks NGFW?

Options:

A.  

Traffic, User-ID, URL

B.  

Traffic, threat, data filtering, User-ID

C.  

GlobalProtect, traffic, application statistics

D.  

Threat, GlobalProtect, application statistics, WildFire submissions

Discussion 0
Question # 36

A security administrator is creating a new custom report to get a consolidated view of network events and needs to select a database to query for the report data.

Which valid set of databases is available for the task?

Options:

A.  

Threat, URL Filtering, WildFire Submissions, GlobalProtect

B.  

Traffic, User-ID, Application Statistics, HIP Match

C.  

Data Filtering, IP-Tag, User-ID, Endpoint Security

D.  

System, Config, Authentication, Session Flow

Discussion 0
Question # 37

A network engineer observes that after a primary link recovers, the firewall immediately switches traffic back from the backup static route to the primary static route. The engineer checks the path monitoring configuration for the primary route.

Which value is configured for the preemptive hold time to cause this behavior?

Options:

A.  

Lowest possible value greater than 0

B.  

0

C.  

Default value

D.  

Feature disabled

Discussion 0

NGFW-Engineer PDF

NGFW-Engineer PDF (Printable)
$46.5
$154.99

NGFW-Engineer Testing Engine

NGFW-Engineer PDF (Printable)
$51
$169.99

NGFW-Engineer PDF + Testing Engine

NGFW-Engineer PDF (Printable)
$63.9
$212.99

Free Exams Sample Questions