Palo Alto Networks NGFW Engineer Free Practice Exam Questions

81 real Palo Alto Networks NGFW Engineer exam questions with answers and AI explanations. Palo Alto Networks certification prep — page 3 of 9.

1. Question 21: Which two statements describe an external zone in the context of virtual systems (VSYS) on a Palo Alto Networks firewall? (Choose two.)
2. Question 22: A multinational organization wants to use the Cloud Identity Engine (CIE) to aggregate identity data from multiple sources (on premises AD, Azure AD, Okta) whi…
3. Question 23: Which two statements apply to configuring required security rules when setting up an IPSec tunnel between a Palo Alto Networks firewall and a third- party gate…
4. Question 24: Which networking technology can be configured on Layer 3 interfaces but not on Layer 2 interfaces?
5. Question 25: By default, which type of traffic is configured by service route configuration to use the management interface?
6. Question 26: Which set of options is available for detailed logs when building a custom report on a Palo Alto Networks NGFW?
7. Question 27: To maintain security efficacy of its public cloud resources by using native tools, a company purchases Cloud NGFW credits to replicate the Panorama, PA-Series,…
8. Question 28: In a hybrid cloud deployment, what is the primary function of Ansible in managing Palo Alto Networks NGFWs?
9. Question 29: An organization has configured GlobalProtect in a hybrid authentication model using both certificate-based authentication for the pre-logon stage and SAML-base…
10. Question 30: What is a result of enabling split tunneling in the GlobalProtect portal configuration with the “Both Network Traffic and DNS” option?