NGFW-Engineer 試験問題を無料オンラインアクセス

An NGFW engineer is configuring multiple Layer 2 interfaces on a Palo Alto Networks firewall, and all interfaces must be assigned to the same VLAN. During initial testing, it is reported that clients located behind the various interfaces cannot communicate with each other.
Which action taken by the engineer will resolve this issue?

• A.Assign each interface to the appropriate Layer 2 zone and configure Security policies for interfaces not assigned to the same zone.
• B.Configure each interface to belong to the same Layer 2 zone and enable IP routing between them.
• C.Enable IP routing between the interfaces and configure a Security policy to allow traffic between interfaces within the VLAN.
• D.Assign each interface to the appropriate Layer 2 zone and configure a policy that allows traffic within the VLAN.

A security administrator is creating a new custom report to get a consolidated view of network events and needs to select a database to query for the report data.
Which valid set of databases is available for the task?

• A.Threat, URL Filtering, WildFire Submissions, GlobalProtect
• B.System, Config, Authentication, Session Flow
• C.Data Filtering, IP-Tag, User-ID, Endpoint Security
• D.Traffic, User-ID, Application Statistics, HIP Match

Which CLI command is used to configure the management interface as a DHCP client?

• A.set deviceconfig management type dhcp-client
• B.set network dhcp interface management
• C.set deviceconfig system type dhcp-client
• D.set network dhcp type management-interface

An administrator needs to perform several maintenance tasks on a managed firewall directly from the Panorama console, without using the Context Switch feature.
Which set of tasks can the administrator fully execute from the Panorama UI? (Choose one answer)

• A.Edit a post-rule. Create a new certificate profile. Configure the firewall's hostname.
• B.Download and install a new content update. View current firewall session details. Initiate a device reboot.
• C.Modify the IP address of a Layer 3 interface. Configure a new local administrator account. Edit a pre- rule.
• D.Create a new zone. Configure a new virtual router. View the local ACC on the firewall.

Without performing a context switch, which set of operations can be performed that will affect the operation of a connected firewall on the Panorama GUI?

• A.Modification of local security rules, modification of a Layer 3 interface, modification of the firewall device hostname
• B.Modification of post NAT rules, creation of new views on the local firewall ACC tab, creation of local custom reports
• C.Modification of pre-security rules, modification of a virtual router, modification of an IKE Gateway Network Profile
• D.Restarting the local firewall, running a packet capture, accessing the firewall CLI