When creating a new zone in PAN-OS, which of the following must be specified?

Zone name, type, and at least one interface

Zone name, type, and a security policy

What is the default behavior for inter-zone traffic in PAN-OS?

Allowed only if the zones are in the same virtual router

Denied only if the zones are in different virtual routers

A security architect is planning a new PAN-OS firewall deployment. They want to ensure that all traffic between the corporate network and the internet is inspected, while also allowing the corporate network to communicate with a partner network. The architect wants to use zones to simplify policy management. What is the most effective way to structure the zones?

Create a single zone for all networks and rely on IP-based policies.

Create two zones: 'Corporate' and 'External', and assign both the internet and partner interfaces to the 'External' zone.

Create three zones: 'Corporate', 'Internet', and 'Partner', and assign the appropriate interfaces to each.

Create two zones: 'Corporate' and 'Internet', and assign the partner network to the 'Corporate' zone.

In a PAN-OS security policy rule, what do the Source Zone and Destination Zone fields specify?

The zones from which traffic originates and to which it is destined

The IP addresses of the source and destination hosts

The interfaces through which the traffic enters and exits the firewall

The applications that are allowed for the traffic

Which of the following is an example of a setting that can be configured in a zone protection profile?

Maximum number of concurrent sessions

SYN flood protection parameters

Allowed IP addresses for management access

Palo Alto NetworksCertified Next-Generation Firewall Engineer

Domain 1Objective 2

1.2 Configure Zones NEXT-GENERATION-FIREWALL-ENGINEER Practice Questions (Page 4)

Part of the PAN-OS Networking Configuration domain, which accounts for 40% of the NEXT-GENERATION-FIREWALL-ENGINEER exam.

21questions here

5free pages

8concepts

40%of the exam

Questions 16–20

16foundation · easy
When creating a new zone in PAN-OS, which of the following must be specified?
Select an answer first
17foundation · easy
What is the default behavior for inter-zone traffic in PAN-OS?
Select an answer first
18application · medium
A security architect is planning a new PAN-OS firewall deployment. They want to ensure that all traffic between the corporate network and the internet is inspected, while also allowing the corporate network to communicate with a partner network. The architect wants to use zones to simplify policy management. What is the most effective way to structure the zones?
Select an answer first
19foundation · easy
In a PAN-OS security policy rule, what do the Source Zone and Destination Zone fields specify?
Select an answer first
20foundation · easy
Which of the following is an example of a setting that can be configured in a zone protection profile?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to NEXT-GENERATION-FIREWALL-ENGINEER

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Palo Alto Networks. “NEXT-GENERATION-FIREWALL-ENGINEER” is a trademark of its owner, used for identification only.