NGFW-Engineer無料問題集「Palo Alto Networks Next-Generation Firewall Engineer」

質問 1

An NGFW engineer is configuring multiple Panorama-managed firewalls to start sending all logs to Strata Logging Service. The Strata Logging Service instance has been provisioned, the required device certificates have been installed, and Panorama and the firewalls have been successfully onboarded to Strata Logging Service.
Which configuration task must be performed to start sending the logs to Strata Logging Service and continue forwarding them to the Panorama log collectors as well?

（A）Select the "Enable Duplicate Logging" option in the Cloud Logging section under Device --> Setup --> Management in the appropriate templates.

（B）Enable the "Panorama/Cloud Logging" option in the Logging and Reporting Settings section under Device --> Setup --> Management in the appropriate templates.

（C）Modify all active Log Forwarding profiles to select the "Cloud Logging" option in each profile match list in the appropriate device groups.

（D）Select the "Enable Cloud Logging" option in the Cloud Logging section under Device --> Setup --> Management in the appropriate templates.

正解：D 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 2

When deploying Palo Alto Networks NGFWs in a cloud service provider (CSP) environment, which method ensures high availability (HA) across multiple availability zones?

（A）Using load balancer and health probes

（B）Implementing Terraform templates for redundancy within one availability zone

（C）Configuring active/active HA

（D）Deploying Ansible scripts for zone-specific scaling

正解：A 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 3

Which interface types should be used to configure link monitoring for a high availability (HA) deployment on a Palo Alto Networks NGFW?

（A）HA, Virtual Wire, and Layer 2

（B）Virtual Wire, Layer 2, and Layer 3

（C）HA, Layer 2. and Layer 3

（D）Tap, Virtual Wire, and Layer 3

正解：B 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 4

How does a Palo Alto Networks NGFW respond when the preemptive hold time is set to 0 minutes during configuration of route monitoring?

（A）It reinstalls the route into the routing information base (RIB) as soon as the path comes up.

（B）It removes the static route because 0 is a NULL value

（C）It does not accept the configuration.

（D）It accepts the configuration but throws a warning message.

正解：A 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 5

Which PAN-OS method of mapping users to IP addresses is the most reliable?

（A）Syslog

（B）Server monitoring

（C）Port mapping

（D）GlobalProtect

正解：B 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

NGFW-Engineer 無料問題集「Palo Alto Networks Next-Generation Firewall Engineer」

弊社を連絡する

関連リンク

トップ試験