최신Palo Alto Networks Next-Generation Firewall Engineer - NGFW-Engineer무료샘플문제
문제1
An engineer is required to configure a site-to-site VPN that will automatically fail over to a backup link if the primary tunnel goes down. The engineer also needs to exchange routes dynamically between the sites.
Which two features necessitate assigning an IP address to the tunnel interface? (Choose two.)
An engineer is required to configure a site-to-site VPN that will automatically fail over to a backup link if the primary tunnel goes down. The engineer also needs to exchange routes dynamically between the sites.
Which two features necessitate assigning an IP address to the tunnel interface? (Choose two.)
정답: B,D
설명: (KoreaDumps 회원만 볼 수 있음)
문제2
An engineer is configuring a GlobalProtect portal and wants to enable split tunneling. The requirement is to route DNS queries for "https://www.google.com/search?q=corp.internal.com" to the DNS servers assigned by the VPN, while allowing all other DNS queries to be resolved by the client's locally configured DNS.
What is the effect of configuring this split DNS policy?
An engineer is configuring a GlobalProtect portal and wants to enable split tunneling. The requirement is to route DNS queries for "https://www.google.com/search?q=corp.internal.com" to the DNS servers assigned by the VPN, while allowing all other DNS queries to be resolved by the client's locally configured DNS.
What is the effect of configuring this split DNS policy?
정답: A
문제3
An administrator is troubleshooting a newly configured site-to-site VPN between a PAN-OS firewall and a third-party policy-based VPN gateway. The tunnel allows traffic between the first pair of configured subnets, but traffic to a newly added remote subnet is failing. The administrator has confirmed that routing and Security policies are correct.
What is the most likely cause of this issue?
An administrator is troubleshooting a newly configured site-to-site VPN between a PAN-OS firewall and a third-party policy-based VPN gateway. The tunnel allows traffic between the first pair of configured subnets, but traffic to a newly added remote subnet is failing. The administrator has confirmed that routing and Security policies are correct.
What is the most likely cause of this issue?
정답: D
설명: (KoreaDumps 회원만 볼 수 있음)
문제4
Which networking technology can be configured on Layer 3 interfaces but not on Layer 2 interfaces?
Which networking technology can be configured on Layer 3 interfaces but not on Layer 2 interfaces?
정답: B
설명: (KoreaDumps 회원만 볼 수 있음)
문제5
An administrator plans to upgrade a pair of active/passive firewalls to a new PAN-OS release. The environment is highly sensitive, and downtime must be minimized.
What is the recommended upgrade process for minimal disruption in this high availability (HA) scenario?
An administrator plans to upgrade a pair of active/passive firewalls to a new PAN-OS release. The environment is highly sensitive, and downtime must be minimized.
What is the recommended upgrade process for minimal disruption in this high availability (HA) scenario?
정답: D
설명: (KoreaDumps 회원만 볼 수 있음)
문제6
Which two zone types are valid when configuring a new security zone? (Choose two.)
Which two zone types are valid when configuring a new security zone? (Choose two.)
정답: A,D
설명: (KoreaDumps 회원만 볼 수 있음)
문제7
In a hybrid cloud deployment, what is the primary function of Ansible in managing Palo Alto Networks NGFWs?
In a hybrid cloud deployment, what is the primary function of Ansible in managing Palo Alto Networks NGFWs?
정답: B
설명: (KoreaDumps 회원만 볼 수 있음)