Courseiva

NGFW-Engineer · domain

PAN OS Networking Configuration

Practise Certified Next-Generation Firewall Engineer (NGFW-Engineer) PAN OS Networking Configuration practice questions — original exam-style scenarios with answer choices, explanations, and analysis of common mistakes.

73 questions23 easy27 medium23 hard

Focused practice

Practice PAN OS Networking Configuration questions

Scored sessions drawing only from this domain — pick a length below.

Start 20-question practice test →

What this domain covers

What to know about PAN OS Networking Configuration

PAN OS Networking Configuration questions test whether you can apply the concept in context, not just recognise a definition.

How the topic appears in realistic exam-style scenarios.

Which detail in the question changes the correct answer.

How to eliminate plausible but wrong options.

How to connect the question back to the wider exam objective.

Watch out for

Common PAN OS Networking Configuration exam traps

  • Answering from memory before reading the full scenario.
  • Missing a constraint such as cost, availability, security, scope or command context.
  • Choosing a broad answer when the question asks for the most specific fix.
  • Ignoring why the wrong options are tempting.

Question index

All PAN OS Networking Configuration questions (73)

Click any question to see the full explanation, or start a practice session above.

1

Which of these is a valid way to define a source IP in a policy?

Easy
2

Which THREE items are defined in an IKE Crypto Profile?

Medium
3

What is the purpose of 'Path Monitoring' in HA?

Hard
4

How can you verify the status of a tunnel interface?

Medium
5

In GlobalProtect, what is the 'Portal' vs. 'Gateway'?

Hard
6

In a Site-to-Site VPN, which setting determines how the firewall handles traffic that does not match the phase 2 selector?

Hard
7

What is the purpose of an 'Aggregate Ethernet' interface?

Medium
8

Which TWO interface types support IP addresses?

Easy
9

Which THREE settings are configured in a Layer 3 interface?

Medium
10

What is the default behavior when a firewall is configured for HA but the control link fails?

Easy
11

What happens if a zone is not assigned to an interface?

Medium
12

Which object defines the encryption settings for a Site-to-Site VPN?

Medium
13

Which TWO issues can prevent BGP from reaching the 'Established' state?

Hard
14

Which TWO items must match for an OSPF adjacency to form?

Easy
15

When configuring an interface for DHCP client, where do you set this?

Medium
16

Which THREE items can be assigned to a Security Zone?

Medium
17

A administrator is configuring a VPN. What does the 'Local IP' in the IKE Gateway represent?

Medium
18

You are configuring a virtual wire interface. Which setting is required to ensure that traffic is passed between the two interfaces?

Medium
19

What is the primary function of a Virtual Router?

Easy
20

Which THREE routing protocols can be configured on a PAN-OS virtual router?

Hard
21

How does the firewall determine which virtual router to use for a packet?

Medium
22

When using OSPF, what is the 'Router ID' used for?

Hard
23

What is a 'Layer 3' interface in PAN-OS?

Easy
24

Which component is required to enable a firewall to act as an OSPF Area Border Router (ABR)?

Easy
25

How do you add a new interface to an existing zone?

Easy
26

What is the benefit of using a Loopback interface for a GlobalProtect portal?

Medium
27

When configuring OSPF on a PAN-OS firewall, what is the impact of setting the dead interval to a value different from the neighbor?

Hard
28

Why might OSPF adjacency stay in 'ExStart/Exchange' state?

Hard
29

You are troubleshooting GlobalProtect and notice the client cannot reach internal resources. Which routing issue is most likely?

Hard
30

Which TWO settings are configured in a Virtual Router?

Easy
31

A administrator needs to route traffic to an internal network via a tunnel. Where is the static route configured?

Medium
32

Where do you configure the tunnel interface IP address in a Site-to-Site VPN setup?

Easy
33

In BGP, which attribute is used to influence the path selection for outgoing traffic?

Hard
34

Which TWO conditions can trigger an HA failover?

Hard
35

Which TWO factors contribute to a successful BGP peer establishment?

Hard
36

Which option is required to use an interface in a security policy?

Easy
37

When troubleshooting a BGP route that is not appearing in the routing table, which command provides the most insight?

Hard
38

A administrator needs to allow traffic between two zones using a specific sub-interface. Which configuration step is mandatory?

Medium
39

Where do you configure the 'Heartbeat' interval for HA?

Medium
40

Which THREE components are involved in a VPN tunnel setup?

Medium
41

What is the purpose of an Aggregate Ethernet (AE) interface?

Easy
42

Which TWO methods are used to troubleshoot GlobalProtect connectivity issues?

Hard
43

Which object type is required to enable GlobalProtect access for remote users?

Easy
44

You are configuring a BGP peer. The connection stays in 'Active' state. What is the most likely cause?

Hard
45

A client is receiving a 'Gateway not reachable' error in GlobalProtect. What is a common troubleshooting step?

Hard
46

Which TWO components are involved in configuring GlobalProtect?

Easy
47

Which TWO commands are useful for troubleshooting OSPF?

Hard
48

What is the purpose of a Security Zone?

Easy
49

How do you delete a security policy rule?

Easy
50

Which TWO types of failover can be configured in HA?

Hard
51

Which THREE factors can affect the speed/throughput of a VPN tunnel?

Medium
52

What is the purpose of an HA Control Link?

Easy
53

In BGP, what is a 'Route Map' used for?

Hard
54

Which THREE items are required to configure a Site-to-Site VPN?

Medium
55

Why might a static route not be visible in the routing table?

Hard
56

Which interface type is used to manage the firewall over the network?

Easy
57

Which TWO interface modes are commonly used to segment traffic?

Easy
58

In an HA active/passive configuration, which mechanism ensures the passive firewall is ready to take over traffic?

Medium
59

Which setting in a Security Policy rule determines whether traffic is permitted or denied?

Medium
60

Which THREE things must be configured to allow HA between two firewalls?

Medium
61

Which TWO items must be configured to allow external management access?

Easy
62

An administrator wants to permit traffic between two sub-interfaces on the same physical port. What is required?

Medium
63

Which command confirms that an OSPF neighbor relationship is in the 'Full' state?

Hard
64

Which TWO actions must be performed to successfully configure a zone protection profile on a zone?

Medium
65

What is the effect of changing the HA heartbeat interval?

Hard
66

What happens to established sessions during an HA failover?

Hard
67

What is the function of a 'Tap' mode interface?

Easy
68

Which TWO protocols can be used to manage the firewall?

Easy
69

In HA, what is the difference between 'Active/Passive' and 'Active/Active' modes?

Medium
70

When configuring HA, what is 'Preemption'?

Medium
71

Which tab is used to configure physical interface settings like speed and duplex?

Easy
72

Which THREE items can be used as a 'Source' in a security policy?

Medium
73

When configuring a Static Route, what does the 'Metric' field do?

Medium

Frequently asked questions

What does the PAN OS Networking Configuration domain cover on the NGFW-Engineer exam?
PAN OS Networking Configuration questions test whether you can apply the concept in context, not just recognise a definition.
How many questions are in this domain?
This page lists all 73 PAN OS Networking Configuration questions in the NGFW-Engineer question bank. The actual exam draws from this domain proportionally to its weighting in the official exam blueprint.
What is the best way to practise this domain?
Start with a short focused session (10 questions) to identify gaps, then work through explanations. Repeat with a longer session once the weak areas feel solid.
Can I practise only PAN OS Networking Configuration questions?
Yes — the session launcher on this page filters questions to this domain only. Choose any session length for inline explanations and scoring.
panw-ngfw-engineer PANW-NGFW-ENGINEER pan os networking configuration Practice Questions