最新的Palo Alto Networks Next-Generation Firewall Engineer - NGFW-Engineer免費考試真題
Which two actions in the IKE Gateways will allow implementation of post-quantum cryptography when building VPNs between multiple Palo Alto Networks NGFWs? (Choose two.)
正確答案: B,D
說明：（僅 Fast2test 成員可見）
After a recent high availability (HA) failover test on an active/passive cluster, an engineer noted a 30-45 second delay before traffic started flowing through a Link Aggregation Control Protocol (LACP) aggregate interface on the newly active firewall.
What should have been configured to support LACP pre-negotiation to minimize LACP convergence delay?
What should have been configured to support LACP pre-negotiation to minimize LACP convergence delay?
正確答案: A
說明：（僅 Fast2test 成員可見）
An administrator is configuring a site-to-site IPSec VPN and assigns an IP address to the tunnel interface.
Which two abilities are enabled by this specific configuration step? (Choose two.)
Which two abilities are enabled by this specific configuration step? (Choose two.)
正確答案: C,D
說明：（僅 Fast2test 成員可見）
Which networking technology can be configured on Layer 3 interfaces but not on Layer 2 interfaces?
正確答案: B
說明：（僅 Fast2test 成員可見）
A network security engineer is segmenting a single firewall into VSYS-A and VSYS-B. For traffic to flow from VSYS-A to VSYS-B, external zones are required.
What are two fundamental properties of the external zones needed for this configuration? (Choose two.)
What are two fundamental properties of the external zones needed for this configuration? (Choose two.)
正確答案: C,D
說明：（僅 Fast2test 成員可見）
To maintain security efficacy of its public cloud resources by using native tools, a company purchases Cloud NGFW credits to replicate the Panorama, PA-Series, and VM-Series devices used in physical data centers.
Resources exist on AWS and Azure:
The AWS deployment is architected with AWS Transit Gateway, to which all resources connect The Azure deployment is architected with each application independently routing traffic The engineer deploying Cloud NGFW in these two cloud environments must account for the following:
Minimize changes to the two cloud environments
Scale to the demands of the applications while using the least amount of compute resources Allow the company to unify the Security policies across all protected areas Which two implementations will meet these requirements? (Choose two.)
Resources exist on AWS and Azure:
The AWS deployment is architected with AWS Transit Gateway, to which all resources connect The Azure deployment is architected with each application independently routing traffic The engineer deploying Cloud NGFW in these two cloud environments must account for the following:
Minimize changes to the two cloud environments
Scale to the demands of the applications while using the least amount of compute resources Allow the company to unify the Security policies across all protected areas Which two implementations will meet these requirements? (Choose two.)
正確答案: A,C
說明：（僅 Fast2test 成員可見）
An engineer is configuring a GlobalProtect portal and wants to enable split tunneling. The requirement is to route DNS queries for "https://www.google.com/search?q=corp.internal.com" to the DNS servers assigned by the VPN, while allowing all other DNS queries to be resolved by the client's locally configured DNS.
What is the effect of configuring this split DNS policy?
What is the effect of configuring this split DNS policy?
正確答案: C
說明：（僅 Fast2test 成員可見）
An engineer configures a PA-440 firewall to act as a switch by creating several Layer 2 interfaces and assigning them all to VLAN 20. A file server is connected to interface ethernet1/1, and client workstations are connected to interfaces ethernet1/2 and ethemet1/3. All devices are in VLAN 20. The clients are unable to access the file server.
Which configuration step to allow this communication by default is missing?
Which configuration step to allow this communication by default is missing?
正確答案: C
說明：（僅 Fast2test 成員可見）
When configuring a Zone Protection profile, in which section (protection type) would an NGFW engineer configure options to protect against activities such as spoofed IP addresses and split handshake session establishment attempts?
正確答案: B
說明：（僅 Fast2test 成員可見）
Which type of firewall resource can be assigned when configuring a new firewall virtual system (VSYS)?
正確答案: B
說明：（僅 Fast2test 成員可見）