Exam NGFW-Engineer Topic 1 Question 56 Discussion
Actual exam question for Palo Alto Networks's NGFW-Engineer exam
Question #: 56
Topic #: 1
Question #: 56
Topic #: 1
An administrator must perform several actions on a fleet of firewalls from a central Panorama instance. To maintain efficiency, the administrator wants to only perform actions that do not require switching context into each firewall's individual web interface.
Which set of actions is available to the administrator directly from the Panorama UI?
Which set of actions is available to the administrator directly from the Panorama UI?
Suggested Answer: B Vote an answer
Basic Concept: Panorama can manage shared objects, templates, and device-group policy directly. Local runtime inspection and some per-device operational views require context switching.
Why B is Correct: Modifying a pre-rule, editing a shared service object, and creating a certificate profile are Panorama-level configuration tasks.
Why A is Wrong: Creating a new VLAN - Assigning an interface to the new VLAN Configuring a new DHCP server on the firewall is related to management or logging, but it does not provide the required Panorama operation, rule hierarchy behavior, or dual-log forwarding outcome.
Why C is Wrong: Accessing the CLI - Restarting the device - Installing the latest content and software versions is related to management or logging, but it does not provide the required Panorama operation, rule hierarchy behavior, or dual-log forwarding outcome.
Why D is Wrong: Configuring a new IPSec tunnel - Modifying the IKE gateway - Changing the DNS server settings of the firewall is related to management or logging, but it does not provide the required Panorama operation, rule hierarchy behavior, or dual-log forwarding outcome.
Why B is Correct: Modifying a pre-rule, editing a shared service object, and creating a certificate profile are Panorama-level configuration tasks.
Why A is Wrong: Creating a new VLAN - Assigning an interface to the new VLAN Configuring a new DHCP server on the firewall is related to management or logging, but it does not provide the required Panorama operation, rule hierarchy behavior, or dual-log forwarding outcome.
Why C is Wrong: Accessing the CLI - Restarting the device - Installing the latest content and software versions is related to management or logging, but it does not provide the required Panorama operation, rule hierarchy behavior, or dual-log forwarding outcome.
Why D is Wrong: Configuring a new IPSec tunnel - Modifying the IKE gateway - Changing the DNS server settings of the firewall is related to management or logging, but it does not provide the required Panorama operation, rule hierarchy behavior, or dual-log forwarding outcome.
by Carol at Jul 16, 2026, 09:49 PM
0
0
0
10
Comments
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
Report Comment
Commenting
You can sign-up / login (it's free).