1.2 Configure Zones NEXT-GENERATION-FIREWALL-ENGINEER Practice Questions (Page 1)

Questions 1–5

1. 1foundation · easy

   What is the effect of assigning an interface to a zone in PAN-OS?

   • AThe interface inherits the security policies of the zone
   • BThe interface automatically receives an IP address from the zone
   • CThe interface becomes the default gateway for the zone
   • DTraffic on that interface is subject to the security policies that reference the zone
   Reveal Solution Discussion Select an answer first
2. 2application · medium

   A security administrator is configuring a PAN-OS firewall. They have created a zone named 'DMZ' and need to assign two interfaces to this zone. One interface connects to a web server, and the other connects to a mail server. Both servers are in the same subnet. What is the correct way to assign these interfaces to the 'DMZ' zone?

   • ACreate two separate zones, one for each interface, and assign each interface to its respective zone.
   • BAssign one interface to the 'DMZ' zone and leave the other unassigned.
   • CAssign both interfaces to the 'DMZ' zone.
   • DAssign one interface to the 'DMZ' zone and the other to the 'Untrust' zone.
   Reveal Solution Discussion Select an answer first
4. 3foundation · easy

   How is intra-zone traffic handled by default in PAN-OS?

   • ADenied by default
   • BDenied only if the zone is a Layer3 zone
   • CAllowed by default
   • DAllowed only if a security policy is created
   Reveal Solution Discussion Select an answer first
5. 4expert · hard

   A network administrator is configuring a PAN-OS firewall with two interfaces: ethernet1/1 and ethernet1/2. The administrator wants to create a zone named 'Web' and assign ethernet1/1 to it. However, ethernet1/2 is already assigned to a zone named 'App'. The administrator wants to move ethernet1/2 to the 'Web' zone. What is the correct procedure?

   • ACreate a new interface and assign it to the 'Web' zone, leaving ethernet1/2 in the 'App' zone.
   • BAdd ethernet1/2 to the 'Web' zone without removing it from the 'App' zone.
   • CRemove ethernet1/2 from the 'App' zone and then add it to the 'Web' zone.
   • DDelete the 'App' zone and then add ethernet1/2 to the 'Web' zone.
   Reveal Solution Discussion Select an answer first
6. 5foundation · easy

   In PAN-OS, what is the primary purpose of a zone?

   • ATo assign IP addresses to interfaces
   • BTo define the physical interface speed and duplex settings
   • CTo group one or more interfaces and enforce security policies based on traffic direction
   • DTo configure routing protocols like OSPF or BGP
   Reveal Solution Discussion Select an answer first