A company runs a firewall that experiences peak traffic during business hours. The administrator wants to apply a PAN-OS maintenance release with minimal impact on active sessions. Which scheduling approach is most appropriate?

Schedule the installation to occur during peak hours to test failover

Schedule only the download during business hours and install manually later

Schedule the installation to occur immediately after the download completes

Schedule the download and installation to occur during a maintenance window on a weekend

What is a critical consideration when rolling back a PAN-OS update?

The firewall will lose all network connectivity permanently

The rollback will delete all existing configurations

The rollback requires a new license

The configuration may be incompatible with the previous version

An administrator is planning to upgrade a firewall that is currently handling thousands of active VPN tunnels and application sessions. The upgrade will require a reboot. What should the administrator do to minimize disruption to existing sessions?

Upgrade only the dataplane, not the management plane, to avoid session loss

Use the 'graceful restart' option to preserve sessions across the reboot

Disable session setup before the upgrade to prevent new sessions

Schedule the upgrade during a maintenance window and inform users that sessions will be dropped

A company wants to automate the installation of PAN-OS maintenance releases on its firewalls, but only after the release has been available for two weeks. The administrator wants to ensure the firewall does not install a release immediately upon availability. Which configuration should be used?

Schedule the update to occur weekly, and manually verify the release date before the scheduled run

Set the release channel to 'Previous' to ensure only older releases are installed

Configure the firewall to check for updates only once a month

Use the 'delay' option in the scheduled update settings

Palo Alto NetworksCertified Next-Generation Firewall Engineer

Domain 2Objective 4

2.4 Implement PAN-OS Software Updates NEXT-GENERATION-FIREWALL-ENGINEER Practice Questions (Page 5)

Part of the PAN-OS Device Setting Configuration domain, which accounts for 40% of the NEXT-GENERATION-FIREWALL-ENGINEER exam.

34questions here

7free pages

10concepts

40%of the exam

Questions 21–25

21application · medium
A company runs a firewall that experiences peak traffic during business hours. The administrator wants to apply a PAN-OS maintenance release with minimal impact on active sessions. Which scheduling approach is most appropriate?
Select an answer first
22foundation · easy
What is a critical consideration when rolling back a PAN-OS update?
Select an answer first
23foundation · easy
In the PAN-OS management interface, which section allows an administrator to download and install a PAN-OS software update?
Select an answer first
24application · medium
An administrator is planning to upgrade a firewall that is currently handling thousands of active VPN tunnels and application sessions. The upgrade will require a reboot. What should the administrator do to minimize disruption to existing sessions?
Select an answer first
25expert · medium
A company wants to automate the installation of PAN-OS maintenance releases on its firewalls, but only after the release has been available for two weeks. The administrator wants to ensure the firewall does not install a release immediately upon availability. Which configuration should be used?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to NEXT-GENERATION-FIREWALL-ENGINEER

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Palo Alto Networks. “NEXT-GENERATION-FIREWALL-ENGINEER” is a trademark of its owner, used for identification only.