NGFW-Engineer 試験問題を無料オンラインアクセス

A network administrator is hardening a new Palo Alto Networks firewall and wants to ensure that all firewall- generated management traffic, such as calls to Strata Logging Service, uses a dedicated in-band data port instead of the out-of-band management port.
Which configuration setting should the administrator modify to reroute this type of traffic?

• A.Interface Management profile
• B.Service route
• C.Static route
• D.Virtual router

Which PAN-OS method of mapping users to IP addresses is the most reliable?

• A.Port mapping
• B.Syslog
• C.GlobalProtect
• D.Server monitoring

An administrator is configuring firewalls via a Panorama template to forward logs to a newly provisioned Strata Logging Service instance. The operational requirement is to maintain existing logging to on-premises Panorama log collectors for immediate, low-latency queries while also forwarding logs to Strata Logging Service for long-term archival. The administrator has already configured and enabled cloud logging connectivity.
Which additional step is necessary to meet the operational requirement?

• A.In the collector group settings, add the Strata Logging Service as a secondary destination for the on- premises collector.
• B.Enable log syncing and commit the template changes to both the on-premises and cloud collectors.
• C.Enable duplicate logging (cloud and on-premises) under Device - > Setup - > Management in the appropriate templates.
• D.Add the Panorama log collector and Strata Logging Service IP addresses to the cloud logging service routes to ensure dual-path cloud and on-premises reachability.

Which method creates the most reliable user-to-IP mapping due to being based on a direct authentication from the user's device to the firewall?

• A.Portal authentication
• B.PAN-OS XML API to push mappings
• C.Polling security event logs with a User-ID agent
• D.Authentication logs from Syslog receiver

What is the correct sequence of evaluation for Security policy rulebases?

• A.Panorama Shared Rules -- > Local Firewall Rules -- > Device Group Rules
• B.Local Firewall Rules -- > Panorama Pre-Rules -- > Panorama Post-Rules
• C.Panorama Post-Rules -- > Panorama Pre-Rules -- > Local Firewall Rules
• D.Panorama Pre-Rules -- > Local Firewall Rules -- > Panorama Post-Rules