3.2 Use APIs to Automate Deployment NEXT-GENERATION-FIREWALL-ENGINEER Practice Questions (Page 4)

Questions 16–20

1. 16application · medium

   A managed security service provider (MSSP) manages firewalls for multiple customers. Each customer has a separate Panorama instance. The MSSP wants to automate the creation of new customer environments, including Panorama configuration, device groups, and templates. Which approach best leverages APIs for this automation?

   • AUse the firewall's local API to configure each firewall individually, bypassing Panorama.
   • BUse a script that calls the Panorama API to create device groups, templates, and push configurations, and then registers firewalls via the API.
   • CUse the Panorama API to export a template from an existing customer and import it for new customers.
   • DUse the Panorama API to create a new device group and template for each customer, then manually configure the firewalls.
   Reveal Solution Discussion Select an answer first
2. 17application · medium

   An administrator is writing a script to reboot a remote firewall using its REST API. The script successfully authenticates and sends the reboot command, but the API returns an HTTP 403 Forbidden error. The administrator has verified the API key is valid and has superuser privileges. What is the most likely cause of this error?

   • AThe reboot command requires a 'type=op' parameter in the request body.
   • BThe request is missing the 'X-PAN-KEY' header with the API key.
   • CThe API key was generated with a read-only role.
   • DThe API key is not authorized for the specific 'reboot' operational command.
   Reveal Solution Discussion Select an answer first
4. 18application · easy

   A company wants to automate the deployment of security policies across their firewall fleet. They are considering using the Panorama API instead of the firewall's local API. What is the primary advantage of using the Panorama API for this task?

   • AIt provides a centralized point of management for multiple firewalls.
   • BIt allows for the use of any programming language.
   • CIt eliminates the need for API authentication.
   • DIt allows for direct, real-time configuration of individual firewalls.
   Reveal Solution Discussion Select an answer first
5. 19foundation · easy

   Which of the following best describes a deployment workflow using APIs?

   • AA way to manually copy configurations between firewalls
   • BA method to bypass security policies
   • CA sequence of manual steps performed by an administrator
   • DA set of automated steps that call APIs to provision and configure firewalls
   Reveal Solution Discussion Select an answer first
6. 20application · medium

   An administrator is debugging a script that uses the Panorama API to create a new security policy rule. The script sends a POST request, but the API returns an HTTP 409 Conflict error. What is the most likely cause of this error?

   • AA rule with the same name already exists in the device group.
   • BThe Panorama instance is temporarily unavailable.
   • CThe API key does not have permission to create rules.
   • DThe request body is missing a required field.
   Reveal Solution Discussion Select an answer first