How many Select Two (Multi-Select) Questions questions are on this page?

This page has 20 Select Two (Multi-Select) Questions scenario questions for the NGFW-Engineer exam, each with detailed explanations and wrong-answer analysis.

How should I approach NGFW-Engineer scenario questions?

Read the full scenario before looking at the answer options. Identify the constraint or requirement in the scenario, then eliminate options that are generally true but wrong for this specific case. Scenario questions reward careful reading over pattern matching.

← Back to Certified Next-Generation Firewall Engineer (NGFW-Engineer) questions

Scenario-based practice

Select Two (Multi-Select) Questions

Practise Certified Next-Generation Firewall Engineer (NGFW-Engineer) practice questions — original exam-style scenarios covering every exam domain, with detailed explanations, wrong-answer analysis, and common exam traps.

Start full practice test Read exam guide

scenario questions

NGFW-Engineer

exam code

Palo Alto Networks

vendor

Scenario guide

How to approach select two (multi-select) questions

Multi-select questions tell you to 'Choose TWO' or 'Choose THREE'. Getting partial credit is not a thing — you must select all correct answers with no incorrect ones. The stem always states how many to choose, so trust it. These questions require precision, not best-guess elimination.

Quick answer

Select Two (Multi-Select) Questions questions test whether you can apply the concept in context, not just recognise a definition.

How the topic appears in realistic exam-style scenarios.

Which detail in the question changes the correct answer.

How to eliminate plausible but wrong options.

How to connect the question back to the wider exam objective.

Practice scenarios

Question 1mediummulti select

Full question →

Which TWO methods can be used to update the security policy on a Palo Alto Networks NGFW programmatically?

A
FTP configuration upload.
Why wrong: This is for full config files, not policy management.
B
REST API.
Modern method for configuration and monitoring.
C
XML API.
Standard method for config management.
D
SNMP SET commands.
Why wrong: SNMP is not for policy management.
E
Serial console access.
Why wrong: Not intended for programmatically updating policies.

Select Two (Multi-Select) Questions

How to approach select two (multi-select) questions

Quick answer

Related NGFW-Engineer topic practice pages

Integration And Automation practice questions

PAN OS Device Setting Configuration practice questions

PAN OS Networking Configuration practice questions

NGFW-Engineer fundamentals practice questions

NGFW-Engineer scenario practice questions

NGFW-Engineer troubleshooting practice questions

Practice scenarios

Which TWO methods can be used to update the security policy on a Palo Alto Networks NGFW programmatically?

Which TWO actions are required to successfully integrate a new External Dynamic List (EDL)?

Which TWO types of files can be included in a bootstrap package?

When integrating an NGFW with an external SIEM for log ingestion, which TWO of the following methods are natively supported for log forwarding?

Which THREE parameters are commonly used in the XML API to target specific policy objects?

Which TWO protocols are commonly used for log forwarding to SIEMs?

Which TWO features are part of the 'Integration and Automation' domain?

Which THREE configuration items are required in the 'init-cfg.txt' file for a VM-Series firewall to join a Panorama server?

Which THREE data sources can an NGFW use to dynamically populate address objects?

You are configuring a new Security Policy. Which TWO settings are required to enable App-ID enforcement for a rule?

Which TWO types of logs can be forwarded to an external server?

Which THREE options are available under the 'Actions' tab of a Security Policy?

Which TWO settings are configured in a Virtual Router?

Which THREE settings are configured in a Layer 3 interface?

Which TWO types of NAT are supported in PAN-OS?

Which TWO issues can prevent BGP from reaching the 'Established' state?

Which TWO features require a valid subscription license?

Which THREE items are found under the 'Network' tab?

Which TWO settings are required to configure an Interface Management Profile?

Which TWO of the following are valid methods to authenticate administrators to the firewall?