1.4 Configure Routing NEXT-GENERATION-FIREWALL-ENGINEER Practice Questions (Page 1)

Questions 1–5

1. 1application · medium

   A firewall has two BGP peers. The administrator wants to prefer routes learned from peer A over peer B for the same prefix. Which BGP attribute should be configured on the firewall to achieve this?

   • ASet a lower MED for routes learned from peer A.
   • BSet a shorter AS_PATH for routes learned from peer A.
   • CSet a higher weight for routes learned from peer A.
   • DSet a higher local preference for routes learned from peer A.
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   In PAN-OS, which routing engine is the default for new deployments and supports multiple virtual routers?

   • ALegacy Routing Engine
   • BAdvanced Routing Engine
   • CDynamic Routing Engine
   • DStatic Routing Engine
   Reveal Solution Discussion Select an answer first
4. 3application · medium

   A network engineer is configuring OSPF on a Palo Alto Networks firewall that will act as an ABR connecting two OSPF areas. The firewall has interfaces in area 0 and area 1. The engineer wants to ensure that routes from area 1 are advertised into area 0, but does not want to redistribute any other routing protocol into OSPF. What must be configured on the firewall?

   • AConfigure OSPF and then add a redistribution policy to import connected routes into OSPF.
   • BCreate two OSPF areas, assign each interface to its respective area, and enable OSPF on the interfaces.
   • CEnable OSPF on the firewall and set the router ID to match the area ID of area 1.
   • DCreate one OSPF area and assign both interfaces to it, then enable OSPF on the interfaces.
   Reveal Solution Discussion Select an answer first
5. 4expert · hard

   A firewall is running OSPF and BGP. The administrator wants to prefer OSPF routes over BGP routes for a specific prefix, but only for traffic originating from a specific zone. Which configuration should be used?

   • ASet a higher OSPF route preference for the prefix in the routing table.
   • BChange the administrative distance of OSPF to be lower than BGP globally.
   • CConfigure a BGP import policy to deny the prefix, forcing OSPF to be used.
   • DConfigure a policy-based forwarding (PBF) rule that matches the source zone and sets the next hop to the OSPF route.
   Reveal Solution Discussion Select an answer first
6. 5expert · hard

   A large enterprise is deploying a new Palo Alto Networks firewall in a data center. The network team wants to use the Advanced Routing Engine to support multiple routing protocols and complex redistribution. However, they have a legacy configuration that uses the legacy routing engine. They need to migrate without disrupting traffic. What is the best approach?

   • AMigrate the configuration to the Advanced Routing Engine during a maintenance window, verifying routing tables and policies after the change.
   • BUse the Advanced Routing Engine only for new virtual routers and leave existing ones on the legacy engine.
   • CKeep the legacy routing engine and manually replicate all routing policies in the Advanced Routing Engine.
   • DDisable all routing protocols and reconfigure them from scratch in the Advanced Routing Engine.
   Reveal Solution Discussion Select an answer first