Which of the following is an example of a proxy bypass rule?

Sending all traffic to the proxy server

Blocking all traffic to external websites

Requiring authentication for all proxy traffic

Excluding internal domains like 'internal.company.com' from the proxy

In PAN-OS proxy server settings, what is the purpose of specifying authentication credentials?

To allow the firewall to bypass security policies

To identify the firewall to the destination web server

To encrypt the traffic between the firewall and the proxy

To authenticate the firewall to the proxy server

A large enterprise has multiple proxy servers in different regions. They want PAN-OS to automatically select the closest proxy server based on the user's location. They also need to exclude internal traffic from the proxy. What is the best approach?

Use a PAC file that contains logic to select the proxy based on the client's IP address.

Configure multiple proxy server entries in PAN-OS and let the firewall load-balance between them.

Use security policies to route traffic to different proxies based on the source zone.

Create multiple bypass rules for each region's internal traffic.

Users report that they cannot access the internet after a web proxy was configured on PAN-OS. The proxy server is at 10.0.0.10:8080, and the firewall has a security policy that allows all outbound traffic. The administrator checks the proxy settings and sees that the proxy IP and port are correct. What is the most likely cause of the issue?

The security policy is blocking the proxy server's IP address.

The proxy server is configured with a PAC file that is not being used.

The proxy bypass rule is incorrectly set to bypass all traffic.

The firewall cannot reach the proxy server due to a routing issue.

In a PAC file, what does the 'FindProxyForURL' function typically return?

A boolean value indicating whether to block the request

A string indicating which proxy to use or to go direct

The IP address of the destination server

The authentication credentials for the proxy

Palo Alto NetworksCertified Next-Generation Firewall Engineer

Domain 2Objective 7

2.7 Configure Web Proxy on PAN-OS NEXT-GENERATION-FIREWALL-ENGINEER Practice Questions (Page 5)

Part of the PAN-OS Device Setting Configuration domain, which accounts for 40% of the NEXT-GENERATION-FIREWALL-ENGINEER exam.

26questions here

6free pages

7concepts

40%of the exam

Questions 21–25

21foundation · easy
Which of the following is an example of a proxy bypass rule?
Select an answer first
22foundation · easy
In PAN-OS proxy server settings, what is the purpose of specifying authentication credentials?
Select an answer first
23expert · hard
A large enterprise has multiple proxy servers in different regions. They want PAN-OS to automatically select the closest proxy server based on the user's location. They also need to exclude internal traffic from the proxy. What is the best approach?
Select an answer first
24application · medium
Users report that they cannot access the internet after a web proxy was configured on PAN-OS. The proxy server is at 10.0.0.10:8080, and the firewall has a security policy that allows all outbound traffic. The administrator checks the proxy settings and sees that the proxy IP and port are correct. What is the most likely cause of the issue?
Select an answer first
25foundation · easy
In a PAC file, what does the 'FindProxyForURL' function typically return?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to NEXT-GENERATION-FIREWALL-ENGINEER

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Palo Alto Networks. “NEXT-GENERATION-FIREWALL-ENGINEER” is a trademark of its owner, used for identification only.