NGFW-Engineer · domain
PAN OS Networking Configuration
Practise Certified Next-Generation Firewall Engineer (NGFW-Engineer) PAN OS Networking Configuration practice questions — original exam-style scenarios with answer choices, explanations, and analysis of common mistakes.
Focused practice
Practice PAN OS Networking Configuration questions
Scored sessions drawing only from this domain — pick a length below.
Start 20-question practice test →What this domain covers
What to know about PAN OS Networking Configuration
PAN OS Networking Configuration questions test whether you can apply the concept in context, not just recognise a definition.
How the topic appears in realistic exam-style scenarios.
Which detail in the question changes the correct answer.
How to eliminate plausible but wrong options.
How to connect the question back to the wider exam objective.
Watch out for
Common PAN OS Networking Configuration exam traps
- ▸Answering from memory before reading the full scenario.
- ▸Missing a constraint such as cost, availability, security, scope or command context.
- ▸Choosing a broad answer when the question asks for the most specific fix.
- ▸Ignoring why the wrong options are tempting.
Question index
All PAN OS Networking Configuration questions (73)
Click any question to see the full explanation, or start a practice session above.
Which of these is a valid way to define a source IP in a policy?
Easy2Which THREE items are defined in an IKE Crypto Profile?
Medium3What is the purpose of 'Path Monitoring' in HA?
Hard4How can you verify the status of a tunnel interface?
Medium5In GlobalProtect, what is the 'Portal' vs. 'Gateway'?
Hard6In a Site-to-Site VPN, which setting determines how the firewall handles traffic that does not match the phase 2 selector?
Hard7What is the purpose of an 'Aggregate Ethernet' interface?
Medium8Which TWO interface types support IP addresses?
Easy9Which THREE settings are configured in a Layer 3 interface?
Medium10What is the default behavior when a firewall is configured for HA but the control link fails?
Easy11What happens if a zone is not assigned to an interface?
Medium12Which object defines the encryption settings for a Site-to-Site VPN?
Medium13Which TWO issues can prevent BGP from reaching the 'Established' state?
Hard14Which TWO items must match for an OSPF adjacency to form?
Easy15When configuring an interface for DHCP client, where do you set this?
Medium16Which THREE items can be assigned to a Security Zone?
Medium17A administrator is configuring a VPN. What does the 'Local IP' in the IKE Gateway represent?
Medium18You are configuring a virtual wire interface. Which setting is required to ensure that traffic is passed between the two interfaces?
Medium19What is the primary function of a Virtual Router?
Easy20Which THREE routing protocols can be configured on a PAN-OS virtual router?
Hard21How does the firewall determine which virtual router to use for a packet?
Medium22When using OSPF, what is the 'Router ID' used for?
Hard23What is a 'Layer 3' interface in PAN-OS?
Easy24Which component is required to enable a firewall to act as an OSPF Area Border Router (ABR)?
Easy25How do you add a new interface to an existing zone?
Easy26What is the benefit of using a Loopback interface for a GlobalProtect portal?
Medium27When configuring OSPF on a PAN-OS firewall, what is the impact of setting the dead interval to a value different from the neighbor?
Hard28Why might OSPF adjacency stay in 'ExStart/Exchange' state?
Hard29You are troubleshooting GlobalProtect and notice the client cannot reach internal resources. Which routing issue is most likely?
Hard30Which TWO settings are configured in a Virtual Router?
Easy31A administrator needs to route traffic to an internal network via a tunnel. Where is the static route configured?
Medium32Where do you configure the tunnel interface IP address in a Site-to-Site VPN setup?
Easy33In BGP, which attribute is used to influence the path selection for outgoing traffic?
Hard34Which TWO conditions can trigger an HA failover?
Hard35Which TWO factors contribute to a successful BGP peer establishment?
Hard36Which option is required to use an interface in a security policy?
Easy37When troubleshooting a BGP route that is not appearing in the routing table, which command provides the most insight?
Hard38A administrator needs to allow traffic between two zones using a specific sub-interface. Which configuration step is mandatory?
Medium39Where do you configure the 'Heartbeat' interval for HA?
Medium40Which THREE components are involved in a VPN tunnel setup?
Medium41What is the purpose of an Aggregate Ethernet (AE) interface?
Easy42Which TWO methods are used to troubleshoot GlobalProtect connectivity issues?
Hard43Which object type is required to enable GlobalProtect access for remote users?
Easy44You are configuring a BGP peer. The connection stays in 'Active' state. What is the most likely cause?
Hard45A client is receiving a 'Gateway not reachable' error in GlobalProtect. What is a common troubleshooting step?
Hard46Which TWO components are involved in configuring GlobalProtect?
Easy47Which TWO commands are useful for troubleshooting OSPF?
Hard48What is the purpose of a Security Zone?
Easy49How do you delete a security policy rule?
Easy50Which TWO types of failover can be configured in HA?
Hard51Which THREE factors can affect the speed/throughput of a VPN tunnel?
Medium52What is the purpose of an HA Control Link?
Easy53In BGP, what is a 'Route Map' used for?
Hard54Which THREE items are required to configure a Site-to-Site VPN?
Medium55Why might a static route not be visible in the routing table?
Hard56Which interface type is used to manage the firewall over the network?
Easy57Which TWO interface modes are commonly used to segment traffic?
Easy58In an HA active/passive configuration, which mechanism ensures the passive firewall is ready to take over traffic?
Medium59Which setting in a Security Policy rule determines whether traffic is permitted or denied?
Medium60Which THREE things must be configured to allow HA between two firewalls?
Medium61Which TWO items must be configured to allow external management access?
Easy62An administrator wants to permit traffic between two sub-interfaces on the same physical port. What is required?
Medium63Which command confirms that an OSPF neighbor relationship is in the 'Full' state?
Hard64Which TWO actions must be performed to successfully configure a zone protection profile on a zone?
Medium65What is the effect of changing the HA heartbeat interval?
Hard66What happens to established sessions during an HA failover?
Hard67What is the function of a 'Tap' mode interface?
Easy68Which TWO protocols can be used to manage the firewall?
Easy69In HA, what is the difference between 'Active/Passive' and 'Active/Active' modes?
Medium70When configuring HA, what is 'Preemption'?
Medium71Which tab is used to configure physical interface settings like speed and duplex?
Easy72Which THREE items can be used as a 'Source' in a security policy?
Medium73When configuring a Static Route, what does the 'Metric' field do?
MediumOther domains
All NGFW-Engineer exam domains
Frequently asked questions
- What does the PAN OS Networking Configuration domain cover on the NGFW-Engineer exam?
- PAN OS Networking Configuration questions test whether you can apply the concept in context, not just recognise a definition.
- How many questions are in this domain?
- This page lists all 73 PAN OS Networking Configuration questions in the NGFW-Engineer question bank. The actual exam draws from this domain proportionally to its weighting in the official exam blueprint.
- What is the best way to practise this domain?
- Start with a short focused session (10 questions) to identify gaps, then work through explanations. Repeat with a longer session once the weak areas feel solid.
- Can I practise only PAN OS Networking Configuration questions?
- Yes — the session launcher on this page filters questions to this domain only. Choose any session length for inline explanations and scoring.