NGFW-Engineer 試験問題 36
NGFW エンジニアが、会計仮想システム (VSYS) とマーケティング VSYS 間の双方向接続を確立しています。トラフィックはファイアウォールを通過せずに (外部への物理接続なしに) ゾーン間を移動する必要があります。各 VSYS のインターフェイスは個別の仮想ルータ (VR) に割り当てられ、VR 間の静的ルートが設定されています。各 VSYS に対して外部ゾーンが正しく作成されています。各ゾーンとその外部ゾーン間の目的のトラフィックを許可するセキュリティ ポリシーが追加されています。しかし、目的のトラフィックはどちらの方向にも、一方の VSYS から他方の VSYS へ正常に通過することができません。
この問題を解決するために、他にどのような設定作業が必要ですか？
この問題を解決するために、他にどのような設定作業が必要ですか？
NGFW-Engineer 試験問題 37
A network security engineer is designing a resilient architecture for inspecting traffic in Google Cloud Platform (GCP). The design must ensure that firewall service is maintained even if a single GCP zone becomes unavailable.
Which architecture should be used for the VM-Series firewalls in this use case?
Which architecture should be used for the VM-Series firewalls in this use case?
NGFW-Engineer 試験問題 38
An NGFW engineer is establishing bidirectional connectivity between the accounting virtual system (VSYS) and the marketing VSYS. The traffic needs to transition between zones without leaving the firewall (no external physical connections). The interfaces for each VSYS are assigned to separate virtual routers (VRs), and inter-VR static routes have been configured. An external zone has been created correctly for each VSYS.
Security policies have been added to permit the desired traffic between each zone and its respective external zone. However, the desired traffic is still unable to successfully pass from one VSYS to the other in either direction.
Which additional configuration task is required to resolve this issue?
Security policies have been added to permit the desired traffic between each zone and its respective external zone. However, the desired traffic is still unable to successfully pass from one VSYS to the other in either direction.
Which additional configuration task is required to resolve this issue?
NGFW-Engineer 試験問題 39
An organization is migrating its GlobalProtect user authentication from an existing LDAP directory to a new Kerberos server. To ensure a smooth transition, the network security team needs to allow users from both directories to authenticate for a period of 90 days. The firewall should first attempt authentication against the new Kerberos server and then fall back to the legacy LDAP server if the initial attempt fails.
Which two configurations are required to implement this authentication fallback strategy? (Choose two.)
Which two configurations are required to implement this authentication fallback strategy? (Choose two.)
NGFW-Engineer 試験問題 40
Palo Alto Networks NGFWにおいて、ユーザーに管理者ロールプロファイルを割り当てる目的は何ですか？