Palo Alto Networks NGFW-Engineer Quiz 1 Topic 3 Questions 1-5

Question: 1

What is a result of enabling split tunneling in the GlobalProtect portal configuration with the ''Both Network Traffic and DNS'' option?

AIt specifies when the secondary DNS server is used for resolution to allow access to specific domains that are not managed by the VPN.

BIt allows users to access internal resources when connected locally and external resources when connected remotely using the same FQDN.

Clt allows devices on a local network to access blocked websites by changing which DNS server resolves certain domain names.

DIt specifies which domains are resolved by the VPN-assigned DNS servers and which domains are resolved by the local DNS servers.

Show Answer

Question: 2

When integrating Kubernetes with Palo Alto Networks NGFWs, what is used to secure traffic between microservices?

AService graph

BAnsible automation modules

CPanorama role-based access control

DCN-Series firewalls

Show Answer

Question: 3

Which set of options is available for detailed logs when building a custom report on a Palo Alto Networks NGFW?

ATraffic, User-ID, URL

BTraffic, threat, data filtering, User-ID

CGlobalProtect, traffic, application statistics

DThreat, GlobalProtect, application statistics, WildFire submissions

Show Answer

Question: 4

According to dynamic updates best practices, what is the recommended threshold value for content updates in a mission- critical network?

A8 hours

B16 hours

C32 hours

D48 hours

Show Answer

Question: 5

Which CLI command is used to configure the management interface as a DHCP client?

Aset network dhcp interface management

Bset network dhcp type management-interface

Cset deviceconfig system type dhcp-client

Dset deviceconfig management type dhcp-client

Show Answer

Palo Alto Networks NGFW-Engineer Quiz:1 Topic:3 Questions:1-5