Courseiva
Free · No account needed · No credit card

Certified Next-Generation Firewall Engineer (NGFW-Engineer) Practice Test

247 questions with instant explanations, domain breakdown, and wrong-answer analysis. Built for the real exam.

Instant feedback after each answer
Full explanations included
Domain score breakdown
Pass mark: 860 (scaled 300–1,000)

Sample questions with explanations

This is exactly what you see during practice — question, options, and a full explanation after you answer.

Q1Integration And Automationhard
Full explanation →

You are configuring an Auto-Scaling Group in AWS with the VM-Series. During the bootstrap process, which file is mandatory to ensure the firewall registers with Panorama successfully?

Alicense.txt
init-cfg.txtCorrect
Cbootstrap.xml
Dconfig.cfg

The 'init-cfg.txt' file is required for bootstrapping and contains the Panorama IP and authorization key to register the VM.

Q2Integration And Automationmedium
Full explanation →

An administrator is using Terraform to manage Palo Alto Networks security policies. Which provider resource is used to create a security rule?

Apanos_firewall_rule
Bpanos_policy_rule
Cpanos_security_policy
panos_security_ruleCorrect

The 'panos_security_rule' resource is the standard Terraform resource for managing security policies on Palo Alto Networks devices.

Q3Integration And Automationhard
Full explanation →

You are troubleshooting a REST API integration where Python scripts are failing to retrieve device information. The API returns a '403 Forbidden' error. What is the most likely cause?

AThe API Key is expired.
BThe JSON body is malformed.
The admin account lacks permissions for the requested object.Correct
DThe API endpoint URL is incorrect.

A 403 error indicates that the API key provided has insufficient permissions or the admin account associated with the key lacks the necessary role to access the resource.

What's covered

Questions are tagged by exam domain. Practice a specific domain or mix them all.

Untimed Practice

Answer at your own pace. Explanation and domain tag shown immediately after each answer.

Timed Practice

Countdown timer starts immediately. Results and domain scores shown at the end — just like the real exam.

Why practice here?

Full explanations on every question

Not just the right answer — you get exactly why each wrong option is wrong, so you learn the concept, not the answer.

Domain score breakdown

After each session see your score by exam domain so you know exactly where to focus study time.

100% free, forever

No subscription, no trial, no email wall. Start a session in under 10 seconds.

Exam-style questions

Scenario-based, precise wording, realistic distractors — written to match what you actually see on exam day.

← All NGFW-Engineer questionsNGFW-Engineer exam guideStudy guidePractice by domain