最新的Palo Alto Networks Next-Generation Firewall Engineer - NGFW-Engineer免費考試真題
問題1
What is a result of enabling split tunneling in the GlobalProtect portal configuration with the "Both Network Traffic and DNS" option?
正確答案: A
說明：（僅 VCESoft 成員可見）
問題2
In regard to the Advanced Routing Engine (ARE), what must be enabled first when configuring a logical router on a PAN-OS firewall?
正確答案: B
說明：（僅 VCESoft 成員可見）
問題3
When configuring a Zone Protection profile, in which section (protection type) would an NGFW engineer configure options to protect against activities such as spoofed IP addresses and split handshake session establishment attempts?
正確答案: B
說明：（僅 VCESoft 成員可見）
問題4
After a recent high availability (HA) failover test on an active/passive cluster, an engineer noted a 30-45 second delay before traffic started flowing through a Link Aggregation Control Protocol (LACP) aggregate interface on the newly active firewall.
What should have been configured to support LACP pre-negotiation to minimize LACP convergence delay?
What should have been configured to support LACP pre-negotiation to minimize LACP convergence delay?
正確答案: D
說明：（僅 VCESoft 成員可見）
問題5
Which two zone types are valid when configuring a new security zone? (Choose two.)
正確答案: C,D
說明：（僅 VCESoft 成員可見）
問題6
Which two services are configured by applying an SSL/TLS service profile? (Choose two.)
正確答案: B,D
說明：（僅 VCESoft 成員可見）
問題7
An administrator needs to perform several maintenance tasks on a managed firewall directly from the Panorama console without using the Context Switch feature.
Which set of tasks can the administrator fully execute from the Panorama UI?
Which set of tasks can the administrator fully execute from the Panorama UI?
正確答案: B
說明：（僅 VCESoft 成員可見）
