Free Access PaloAltoNetworks.NGFW-Engineer.v2026-09-16.q105 Practice Test (Page 6)

Question 21

An organization uses Cloud Identity Engine (CIE) to gather user information from its on-premises Active Directory (AD) for employees and a separate Azure AD for external partners. Due to compliance regulations, the firewalls protecting the internal network must not have any identity information about external partners. Conversely, firewalls in the partner-facing DMZ should only be aware of partner identities.
Which CIE feature is designed to solve this data partitioning requirement?

A.Panorama templates, which can be used to push different User-ID agent configurations to each firewall group

B.Segments, which can be configured to create distinct, filter-based views of users and groups that are then redistributed only to the appropriate firewalls

C.Multiple tenants, where a separate CIE tenant is required for each user directory to maintain isolation

D.Directory sync filtering, which is used at the source to prevent specific OUs from being imported into CIE

Question 22

An administrator must perform several actions on a fleet of firewalls from a central Panorama instance. To maintain efficiency, the administrator wants to only perform actions that do not require switching context into each firewall's individual web interface.
Which set of actions is available to the administrator directly from the Panorama UI?

A.Creating a new VLAN
Assigning an interface to the new VLAN
Configuring a new DHCP server on the firewall

B.Modifying a pre-rule
Editing a shared service object
Creating a new certificate profile

C.Accessing the CLI
Restarting the device
Installing the latest content and software versions

D.Configuring a new IPSec tunnel
Modifying the IKE gateway
Changing the DNS server settings of the firewall

Question 23

A firewall administrator needs to configure a new Palo Alto Networks firewall so that its management interface automatically obtains an IP address, netmask, and default gateway from the network.
Which command should be executed in the CLI to accomplish this goal?

A.set deviceconfig system interface mgt mode dhcp

B.set network interface management dhcp enable

C.set deviceconfig system type dhcp-client

D.configure system management-interface ip dynamic

Question 24

An engineer at a managed services provider is updating an application that allows its customers to request firewall changes to also manage SD-WAN. The application will be able to make any approved changes directly to devices via API.
What is a requirement for the application to create SD-WAN interfaces?

A.REST API's "sdwanInterfaceprofiles" parameter on a Panorama device

B.REST API's "sdwanInterfaces" parameter on a firewall device

C.XML API's "sdwanprofiles/interfaces" parameter on a Panorama device

D.XML API's "InterfaceProfiles/sdwan" parameter on a firewall device

Question 25

A cloud security team wants to extend its existing Palo Alto Networks Security policies into the organization's Kubernetes environments. The team requires an NGFW solution that can be deployed natively as a container and managed by Panorama.
Which firewall form factor meets these requirements?

A.Cloud NGFW

B.PA-5400 Series

C.VM-Series

D.CN-Series

Other Version: 569PaloAltoNetworks.NGFW-Engineer.v2026-05-01.q43

Latest Upload: 145Google.Professional-Cloud-DevOps-Engineer.v2026-09-16.q209; 135AAPC.CPC.v2026-09-16.q132; 110HP.HPE0-J82.v2026-09-16.q26; 155F5.303.v2026-09-16.q147; 155PaloAltoNetworks.NGFW-Engineer.v2026-09-16.q105; 127Workday.Workday-Pro-Recruiting.v2026-09-15.q19; 140ACAMS.CAMS-FCI.v2026-09-15.q36; 157VMware.250-614.v2026-09-15.q42; 183IAPP.CIPM.v2026-09-15.q217; 170VMware.2V0-13.25.v2026-09-14.q122

Question 21

Question 22

Question 23

Question 24

Question 25

Download PDF File