NGFW-Engineer Practice Test 3 — 10 Questions

Question 1

Which THREE parameters are commonly used in the XML API to target specific policy objects?

Accepted Answer

location (vsys/dg/template). XPath, Element Name, and Device Group/Template context are standard.

Answer

api-key-hash

Answer

system-serial

Question 2

You are deploying an HA pair. You need to ensure that the session state is synchronized immediately to prevent drops during a failover. Which setting ensures this?

Accepted Answer

Device > High Availability > HA1/HA2 configuration. Session synchronization settings within the HA configuration are required to ensure session tables are mirrored across peers.

Answer

Device > High Availability > Election Settings

Answer

Device > High Availability > Link and Path Monitoring

Answer

Device > High Availability > General

Question 3

Which TWO protocols are commonly used for log forwarding to SIEMs?

Accepted Answer

HTTPS. Syslog and HTTPS are the standard transports for logs.

Answer

DNS

Answer

ICMP

Answer

Telnet

Question 4

In an AWS Lambda function automating firewall changes, why should you use the 'pan-os-python' library with 'xapi' directly rather than the higher-level classes?

Accepted Answer

To reduce latency and overhead in serverless environments.. In serverless environments like Lambda, managing long-lived sessions or complex object hierarchies is often less efficient than raw XML requests via XAPI.

Answer

To avoid installing dependencies.

Answer

Because higher-level classes are not compatible with Python.

Answer

To bypass authentication requirements.

Question 5

Which TWO features are part of the 'Integration and Automation' domain?

Accepted Answer

XML API.. External Dynamic Lists and XML API are core automation tools.

Answer

Hardware bypass.

Answer

GlobalProtect gateway.

Answer

App-ID definition.

Question 6

Which file type is required for an External Dynamic List (EDL) to function correctly?

Accepted Answer

Plain text (.txt). EDLs expect raw text files formatted appropriately for the list type, accessible via HTTP/HTTPS.

Answer

Binary (.bin)

Answer

Executable (.exe)

Answer

Encrypted (.zip)

Question 7

How do you ensure that the firewall automatically blocks traffic from a list of known malicious IP addresses?

Accepted Answer

Configure an External Dynamic List (EDL). External Dynamic Lists (EDL) allow the firewall to ingest and act upon lists of IPs or URLs from a remote source.

Answer

Create a static address group

Answer

Manually update the blocklist every hour

Answer

Use a Dynamic Address Group based on a registration API

Question 8

Which type of interface is used for connecting to a Layer 3 network?

Accepted Answer

Layer 3. A Layer 3 interface is required for routing traffic between subnets.

Answer

Virtual Wire

Answer

Layer 2

Answer

Aggregate

Question 9

Where do you view the system logs to troubleshoot hardware issues?

Accepted Answer

Monitor > Logs > System. The 'Monitor' tab > 'Logs' > 'System' is the central place to see all system-level events.

Answer

Dashboard

Answer

Device > Setup

Answer

Network > Interfaces

Question 10

Which THREE configuration items are required in the 'init-cfg.txt' file for a VM-Series firewall to join a Panorama server?

Accepted Answer

panorama-server. The Panorama IP, the serial number (or auth code), and the device group are standard parameters.

Answer

proxy-server

Answer

dhcp-client