2.7 Configure Web Proxy on PAN-OS NEXT-GENERATION-FIREWALL-ENGINEER Practice Questions (Page 1)

Questions 1–5

1. 1application · medium

   An administrator configures a PAC file on PAN-OS to route web traffic. The PAC file is hosted on an internal web server. After configuration, the firewall logs show that the PAC file is being fetched successfully, but traffic is still going direct instead of through the proxy. What is the most likely cause?

   • AThe PAC file is not being fetched at all.
   • BThe security policy is blocking traffic to the proxy server.
   • CThe PAC file is configured in the wrong device group.
   • DThe PAC file contains a JavaScript error that causes it to return 'DIRECT' for all traffic.
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   What is a common cause of authentication failures when using a web proxy in PAN-OS?

   • AThe PAC file is malformed
   • BIncorrect username or password in the proxy settings
   • CThe firewall's security policy is blocking the traffic
   • DThe proxy server is not reachable
   Reveal Solution Discussion Select an answer first
4. 3expert · hard

   A company has a web proxy on PAN-OS that uses a proxy server at 192.168.1.10:8080. The proxy server is moved to a new IP address 192.168.1.20:8080. The administrator updates the proxy server IP in PAN-OS, but users still cannot access the internet. What is the most likely cause?

   • AThe bypass rule is still configured for the old proxy server IP.
   • BThe PAC file is still pointing to the old proxy server IP.
   • CThe security policy still references the old proxy server IP address.
   • DThe proxy server requires re-authentication after the IP change.
   Reveal Solution Discussion Select an answer first
5. 4expert · hard

   A company has a web proxy on PAN-OS that uses a PAC file. Users report that they cannot access certain websites, but other websites work fine. The PAC file is configured correctly, and the proxy server is reachable. What is the most likely cause?

   • AThe proxy server is not configured with the correct authentication credentials.
   • BThe bypass rule is incorrectly configured for the websites.
   • CThe security policy is blocking the websites.
   • DThe PAC file contains logic that routes certain websites to a proxy that is down.
   Reveal Solution Discussion Select an answer first
6. 5foundation · easy

   What is the primary purpose of a web proxy in PAN-OS?

   • ATo block all non-web traffic at the firewall interface
   • BTo replace the firewall's security policy engine for all traffic
   • CTo encrypt all outbound traffic with TLS without further inspection
   • DTo intercept web traffic and forward it to a designated proxy server for inspection and control
   Reveal Solution Discussion Select an answer first