1.4 Configure Routing NEXT-GENERATION-FIREWALL-ENGINEER Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   Which PAN-OS tool or log is used to monitor routing protocol state changes, such as BGP neighbor up/down events?

   • ATraffic Log
   • BConfig Log
   • CSystem Log
   • DThreat Log
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   Which PAN-OS CLI command is used to view the current routing table, including routes learned from dynamic routing protocols?

   • Ashow ip route
   • Bshow routing route
   • Cshow network route
   • Dshow route table
   Reveal Solution Discussion Select an answer first
4. 8application · medium

   A Palo Alto Networks firewall is being deployed in a large enterprise with multiple routing protocols and complex redistribution requirements. The network team wants to use the Advanced Routing Engine to take advantage of its enhanced features. Which statement about the Advanced Routing Engine is true?

   • AIt is the only routing engine that supports OSPF.
   • BIt requires a separate virtual router for each routing protocol.
   • CIt supports multiple routing protocols simultaneously and provides a unified routing table.
   • DIt does not support route redistribution.
   Reveal Solution Discussion Select an answer first
5. 9application · medium

   A company runs BGP between its Palo Alto Networks firewall and an ISP. The firewall receives the full Internet routing table from the ISP. The security team wants to block routes originating from a specific autonomous system (AS) from being installed in the routing table. Which configuration on the firewall will accomplish this?

   • ASet the BGP local preference to a lower value for routes from that AS.
   • BConfigure a BGP export policy that denies routes with the specified AS in the AS_PATH attribute.
   • CDisable the BGP neighbor session with the ISP.
   • DConfigure a BGP import policy that denies routes with the specified AS in the AS_PATH attribute.
   Reveal Solution Discussion Select an answer first
6. 10application · medium

   A firewall is running OSPF and BGP. The administrator wants to ensure that a specific prefix learned via BGP is not advertised to OSPF neighbors. Which configuration should be applied?

   • AConfigure a BGP import policy that denies the specific prefix.
   • BConfigure an OSPF import policy that denies the specific prefix.
   • CConfigure an OSPF export policy that denies the specific prefix.
   • DSet the OSPF route preference to a higher value for the specific prefix.
   Reveal Solution Discussion Select an answer first