Sample questions
Certified Next-Generation Firewall Engineer (NGFW-Engineer) practice questions
What is the primary benefit of using Panorama templates for automation?
Which CLI command displays the API key if already generated for an admin?
Which tool in the Palo Alto Networks ecosystem is designed specifically for automated orchestration of security workflows?
In a cloud-init deployment, which directory must the bootstrap package be placed for the VM-Series firewall to automatically detect and process it during the first boot?
An administrator is using Terraform to manage Palo Alto Networks security policies. Which provider resource is used to create a security rule?
You are troubleshooting a REST API integration where Python scripts are failing to retrieve device information. The API returns a '403 Forbidden' error. What is the most likely cau…
Which TWO methods can be used to update the security policy on a Palo Alto Networks NGFW programmatically?
You are automating firewall policy updates using the XML API. You have successfully authenticated and retrieved an API key. When attempting to perform an 'edit' operation on a secu…
In a complex automation environment, how can you ensure the integrity of the firewall configuration across multiple automated runs?
You are configuring a new Palo Alto Networks firewall and need to ensure that the management interface is only accessible from a specific subnet. Which configuration component is u…
How do you verify if a security policy is actually matching the traffic you expect?
What is the primary function of a Security Profile Group?
When using the 'pan-os-python' library, which class is primarily used to interact with firewall configuration objects?
You are configuring an External Dynamic List (EDL) on the firewall. What is the required format for the list file?
Which TWO actions are required to successfully integrate a new External Dynamic List (EDL)?
Which TWO types of files can be included in a bootstrap package?
When integrating an NGFW with an external SIEM for log ingestion, which TWO of the following methods are natively supported for log forwarding?
If a Python script interacting with the XML API experiences '503 Service Unavailable', what is the most likely reason?
You are troubleshooting a REST API integration issue where the firewall returns '400 Bad Request'. What should you check first?
An administrator needs to quickly identify if an API call was successful from the firewall side. Which log should be reviewed?
Which THREE parameters are commonly used in the XML API to target specific policy objects?
You are deploying an HA pair. You need to ensure that the session state is synchronized immediately to prevent drops during a failover. Which setting ensures this?
Which TWO protocols are commonly used for log forwarding to SIEMs?
In an AWS Lambda function automating firewall changes, why should you use the 'pan-os-python' library with 'xapi' directly rather than the higher-level classes?