2.7 Configure Web Proxy on PAN-OS NEXT-GENERATION-FIREWALL-ENGINEER Practice Questions (Page 3)

Questions 11–15

1. 11foundation · easy

   When troubleshooting web proxy connectivity issues in PAN-OS, what is a common first step?

   • ADisable the security policy
   • BVerify that the proxy server is reachable from the firewall
   • CChange the proxy port to a random value
   • DReboot the firewall
   Reveal Solution Discussion Select an answer first
2. 12application · medium

   A network engineer is configuring a web proxy on PAN-OS. The proxy server requires NTLM authentication. The engineer enters the username and password in the proxy settings, but the proxy still rejects the connection. What is the most likely reason?

   • AThe firewall's security policy is blocking NTLM traffic.
   • BThe proxy server's IP address is incorrect.
   • CThe proxy server requires the domain name in the username field (e.g., DOMAIN\user).
   • DThe proxy server does not support NTLM authentication.
   Reveal Solution Discussion Select an answer first
4. 13foundation · easy

   How do web proxy settings interact with security policies in PAN-OS?

   • ASecurity policies are only applied to non-proxy traffic
   • BSecurity policies are applied after the proxy forwards traffic
   • CProxy settings replace security policies entirely
   • DSecurity policies are bypassed for all proxy traffic
   Reveal Solution Discussion Select an answer first
5. 14application · medium

   A security team wants to use a web proxy on PAN-OS to inspect outbound web traffic. They have configured the proxy server settings and a bypass rule for internal traffic. However, they notice that traffic to a specific external website is not being inspected. What is the most likely cause?

   • AThe bypass rule is too broad and is matching the external website.
   • BThe proxy server is not configured with the correct authentication credentials.
   • CThe security policy is denying traffic to the external website.
   • DThe PAC file is overriding the bypass rule.
   Reveal Solution Discussion Select an answer first
6. 15application · medium

   A network administrator is troubleshooting a web proxy issue on PAN-OS. The proxy server is configured correctly, and the security policy allows traffic. However, users report that some websites work and others do not. What is the most likely cause?

   • AThe bypass rule is incorrectly configured for some websites.
   • BThe PAC file is not being used correctly.
   • CThe firewall's security policy is blocking specific websites.
   • DThe proxy server is blocking certain websites based on its own policies.
   Reveal Solution Discussion Select an answer first