Exam NGFW-Engineer Topic 1 Question 22 Discussion
Actual exam question for Palo Alto Networks's NGFW-Engineer exam
Question #: 22
Topic #: 1
Question #: 22
Topic #: 1
Without performing a context switch, which set of operations can be performed that will affect the operation of a connected firewall on the Panorama GUI?
Suggested Answer: C Vote an answer
Basic Concept: Panorama can modify centrally managed template and device-group configuration without context switching. Direct local runtime tasks usually require context switch or firewall access.
Why C is Correct: Pre-security rules, virtual routers, and IKE Gateway profiles are Panorama-managed configuration elements that can be edited directly in Panorama.
Why A is Wrong: Restarting the local firewall, running a packet capture, accessing the firewall CLI is related to management or logging, but it does not provide the required Panorama operation, rule hierarchy behavior, or dual-log forwarding outcome.
Why B is Wrong: Modification of local security rules, modification of a Layer 3 interface, modification of the firewall device hostname is related to management or logging, but it does not provide the required Panorama operation, rule hierarchy behavior, or dual-log forwarding outcome.
Why D is Wrong: Modification of post NAT rules, creation of new views on the local firewall ACC tab, creation of local custom reports is related to management or logging, but it does not provide the required Panorama operation, rule hierarchy behavior, or dual-log forwarding outcome.
Why C is Correct: Pre-security rules, virtual routers, and IKE Gateway profiles are Panorama-managed configuration elements that can be edited directly in Panorama.
Why A is Wrong: Restarting the local firewall, running a packet capture, accessing the firewall CLI is related to management or logging, but it does not provide the required Panorama operation, rule hierarchy behavior, or dual-log forwarding outcome.
Why B is Wrong: Modification of local security rules, modification of a Layer 3 interface, modification of the firewall device hostname is related to management or logging, but it does not provide the required Panorama operation, rule hierarchy behavior, or dual-log forwarding outcome.
Why D is Wrong: Modification of post NAT rules, creation of new views on the local firewall ACC tab, creation of local custom reports is related to management or logging, but it does not provide the required Panorama operation, rule hierarchy behavior, or dual-log forwarding outcome.
by Aldrich at Aug 30, 2026, 12:58 PM
0
0
0
10
Comments
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
Report Comment
Commenting
You can sign-up / login (it's free).