Free Palo Alto Networks NGFW-Engineer Exam Questions

Become Palo Alto Networks Certified with updated NGFW-Engineer exam questions and correct answers

Page: 1 / 10

Total 50 Questions | Updated On: Dec 06, 2025

Add To Cart

Question 1

Which configuration in the LACP tab will enable pre-negotiation for an Aggregate Ethernet (AE) interface on a Palo Alto Networks high availability (HA) active/passive pair?

A : Set Transmission Rate to œfast.

B : Set passive link state to œAuto.

C : Set œEnable in HA Passive State

D : Set LACP mode to œActive.

Answer: C

Question 2

Which statement applies to the relationship between Panorama-pushed Security policy and local firewall Security policy?

A : When a policy match is found in a local firewall policy, if any Panorama shared post-rule is configured, it will still be evaluated.

B : Local firewall rules are evaluated after Panorama pre-rules and before Panorama post-rules.

C : Panorama post-rules can be configured to be evaluated before local firewall policy for the purpose of troubleshooting.

D : The order of policy evaluation can be configured differently in different device groups.

Answer: B

Question 3

Which statement applies to the relationship between Panorama-pushed Security policy and local firewall Security policy?

A : When a policy match is found in a local firewall policy, if any Panorama shared post-rule is configured, it will still be evaluated.

B : Local firewall rules are evaluated after Panorama pre-rules and before Panorama post-rules.

C : Panorama post-rules can be configured to be evaluated before local firewall policy for the purpose of troubleshooting.

D : The order of policy evaluation can be configured differently in different device groups.

Answer: B

Question 4

Which statement applies to the relationship between Panorama-pushed Security policy and local firewall Security policy?

A : When a policy match is found in a local firewall policy, if any Panorama shared post-rule is configured, it will still be evaluated.

B : Local firewall rules are evaluated after Panorama pre-rules and before Panorama post-rules.

C : Panorama post-rules can be configured to be evaluated before local firewall policy for the purpose of troubleshooting.

D : The order of policy evaluation can be configured differently in different device groups.

Answer: B

Question 5

Which statement applies to the relationship between Panorama-pushed Security policy and local firewall Security policy?

A : When a policy match is found in a local firewall policy, if any Panorama shared post-rule is configured, it will still be evaluated.

B : Local firewall rules are evaluated after Panorama pre-rules and before Panorama post-rules.

C : Panorama post-rules can be configured to be evaluated before local firewall policy for the purpose of troubleshooting.

D : The order of policy evaluation can be configured differently in different device groups.

Answer: B

Page: 1 / 10

Total 50 Questions | Updated On: Dec 06, 2025

Add To Cart