Palo Alto Networks Next-Generation Firewall Engineer - NGFW-Engineer 模擬練習
A company is enabling SSL Forward Proxy to inspect encrypted traffic. A security engineer generates a new certificate on the firewall and flags it with the "Forward Trust" certificate property.
What is the critical next step that must be performed for decryption to function correctly without causing security warnings for end users?
What is the critical next step that must be performed for decryption to function correctly without causing security warnings for end users?
正解: C
解説: (PassTest メンバーにのみ表示されます)
Which interface types should be used to configure link monitoring for a high availability (HA) deployment on a Palo Alto Networks NGFW?
正解: C
解説: (PassTest メンバーにのみ表示されます)
When configuring a physical interface on a Palo Alto Networks firewall, which IP-based service is only available if the interface is set to Layer 3 mode?
正解: A
解説: (PassTest メンバーにのみ表示されます)
What is a valid configurable limit for setting resource quotas when defining a new VSYS on a Palo Alto Networks firewall?
正解: A
解説: (PassTest メンバーにのみ表示されます)
An organization must secure its AWS and Azure environments using a managed Palo Alto Networks solution, and all policies must be synchronized from an existing Panorama deployment. The organization wants to insert security with the least possible impact on its application teams and use existing hub-and-spoke network designs.
* The AWS environment uses a centralized AWS Transit Gateway (TGW) architecture.
* The Azure environment uses a Virtual WAN (vWAN) hub.
Which two actions are the most appropriate in this use case? (Choose two.)
* The AWS environment uses a centralized AWS Transit Gateway (TGW) architecture.
* The Azure environment uses a Virtual WAN (vWAN) hub.
Which two actions are the most appropriate in this use case? (Choose two.)
正解: B,D
解説: (PassTest メンバーにのみ表示されます)
An engineer is implementing a new rollout of SAML for administrator authentication across a company's Palo Alto Networks NGFWs. User authentication on company firewalls is currently performed with RADIUS, which will remain available for six months, until it is decommissioned. The company wants both authentication types to be running in parallel during the transition to SAML.
Which two actions meet the criteria? (Choose two.)
Which two actions meet the criteria? (Choose two.)
正解: A,C
解説: (PassTest メンバーにのみ表示されます)
According to dynamic updates best practices, what is the recommended threshold value for content updates in a mission- critical network?
正解: C
解説: (PassTest メンバーにのみ表示されます)
A Palo Alto Networks firewall has the following interfaces configured:
* ethernet1/1 (Layer 3)
* ethernet1/2 (TAP)
* ethernet1/3 (Layer 2)
* ethernet1/4 (virtual wire)
An administrator needs to create a link group to monitor upstream connectivity for high availability (HA) failover.
Which set of interfaces can be added to the link group?
* ethernet1/1 (Layer 3)
* ethernet1/2 (TAP)
* ethernet1/3 (Layer 2)
* ethernet1/4 (virtual wire)
An administrator needs to create a link group to monitor upstream connectivity for high availability (HA) failover.
Which set of interfaces can be added to the link group?
正解: A
解説: (PassTest メンバーにのみ表示されます)