2.7 Configure Web Proxy on PAN-OS NEXT-GENERATION-FIREWALL-ENGINEER Practice Questions (Page 4)

Questions 16–20

1. 16application · medium

   A security administrator has configured a web proxy on PAN-OS to forward traffic to an external proxy server. They want to ensure that all web traffic from the internal network is inspected by the firewall's security policies before being sent to the proxy. What must be verified in the security policy configuration?

   • AThe security policy has a bypass rule for the proxy server's IP address.
   • BThe security policy denies all traffic to the proxy server to prevent bypass.
   • CThe security policy is configured to use the proxy as a next-hop.
   • DThe security policy allows traffic from the internal zone to the external proxy's IP address on the proxy port.
   Reveal Solution Discussion Select an answer first
2. 17application · medium

   A network administrator configures a web proxy on PAN-OS with an IP address of 192.168.1.10 and port 3128. The proxy requires authentication. After configuration, users can browse the internet, but the firewall logs show that the proxy authentication is failing. What should the administrator verify first?

   • AThe username and password configured in the proxy server settings are correct.
   • BThe proxy server is using a PAC file that overrides the authentication settings.
   • CThe security policy allows traffic from the firewall to the proxy server.
   • DThe firewall's management interface is on the same subnet as the proxy.
   Reveal Solution Discussion Select an answer first
4. 18expert · hard

   An organization uses a PAC file on PAN-OS to route traffic. The PAC file is hosted on a web server that is only accessible from the management network. After a network change, the PAC file becomes unreachable from the firewall's management interface. What is the impact on web traffic?

   • AWeb traffic will be blocked entirely.
   • BWeb traffic will use the proxy server settings instead of the PAC file.
   • CWeb traffic will continue to use the last known PAC file configuration.
   • DWeb traffic will bypass the proxy and go direct.
   Reveal Solution Discussion Select an answer first
5. 19foundation · easy

   In PAN-OS, what happens to web traffic when a web proxy is configured?

   • AThe firewall inspects web traffic locally and never sends it to an external server
   • BThe firewall forwards web traffic to the proxy server for further processing
   • CThe firewall only forwards traffic that matches a security policy
   • DThe firewall drops all web traffic by default
   Reveal Solution Discussion Select an answer first
6. 20foundation · easy

   What is the purpose of a PAC file in web proxy configuration on PAN-OS?

   • ATo replace the need for a proxy server entirely
   • BTo define rules for which traffic should use the proxy and which should bypass it
   • CTo store authentication credentials for the proxy server
   • DTo encrypt web traffic between the client and the proxy
   Reveal Solution Discussion Select an answer first