You are configuring Panorama for a new firewall. The firewall has two interfaces: one for the internal network and one for the external network. You need to configure the IP addresses for these interfaces. Where should you configure this?

In the device group for the firewall.

Directly on the firewall's local configuration.

In the template assigned to the firewall.

In the pre-rules of the shared device group.

In Panorama, what is the purpose of a template?

To store security policies that are shared across multiple firewalls

To provide a backup of the firewall configuration

To define device-specific settings such as network interfaces, zones, and management settings

To collect logs from managed firewalls for reporting

A company is considering using Panorama to manage its firewalls. They want to centralize configuration and policy management, but they are concerned about the management traffic traversing the internet. What is a recommended practice to secure Panorama-to-firewall communication?

Use IPsec VPN tunnels between Panorama and each firewall.

Allow management traffic on the firewall's dataplane interface.

Use the built-in TLS encryption and authenticate with shared secrets.

Use a GRE tunnel for management traffic.

What is the purpose of a device group in Panorama?

To organize firewalls for the purpose of applying shared security policies

To manage administrative access to Panorama

To store log data from firewalls

To define network settings such as interfaces and routing

When would you use a post-rule in Panorama?

To define device-specific settings that are applied after templates

To create an exception to a global policy that is defined in a pre-rule

To define rules that are only applied to firewalls that are not managed by Panorama

To define a global policy that must be enforced before any other rules

Palo Alto NetworksCertified Next-Generation Firewall Engineer

Domain 3Objective 4

3.4 Use On-Premises Centralized Management NEXT-GENERATION-FIREWALL-ENGINEER Practice Questions (Page 3)

Part of the Integration and Automation domain, which accounts for 20% of the NEXT-GENERATION-FIREWALL-ENGINEER exam.

17questions here

4free pages

8concepts

20%of the exam

Questions 11–15

11application · medium
You are configuring Panorama for a new firewall. The firewall has two interfaces: one for the internal network and one for the external network. You need to configure the IP addresses for these interfaces. Where should you configure this?
Select an answer first
12foundation · easy
In Panorama, what is the purpose of a template?
Select an answer first
13application · medium
A company is considering using Panorama to manage its firewalls. They want to centralize configuration and policy management, but they are concerned about the management traffic traversing the internet. What is a recommended practice to secure Panorama-to-firewall communication?
Select an answer first
14foundation · easy
What is the purpose of a device group in Panorama?
Select an answer first
15foundation · easy
When would you use a post-rule in Panorama?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to NEXT-GENERATION-FIREWALL-ENGINEER

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Palo Alto Networks. “NEXT-GENERATION-FIREWALL-ENGINEER” is a trademark of its owner, used for identification only.