Exam NGFW-Engineer Topic 1 Question 99 Discussion

Actual exam question for Palo Alto Networks's NGFW-Engineer exam
Question #: 99
Topic #: 1
Which two zone types are valid when configuring a new security zone? (Choose two.)

Suggested Answer: A,D Vote an answer

When configuring a new security zone on a Palo Alto Networks firewall, the two valid zone types are:
Tunnel: A Tunnel zone is used for traffic that is associated with a VPN tunnel, such as IPSec tunnels. Traffic passing through a tunnel interface is classified into this zone.
Virtual Wire: A Virtual Wire zone is used when a firewall operates in transparent mode (also known as Layer
2 mode). In this configuration, the firewall can inspect traffic without modifying the IP address structure of the network.

by Louis at May 11, 2026, 09:17 PM

Limited Time Offer

15%

Off

Get Premium NGFW-Engineer Questions as Interactive Self Test Engine or PDF

Comments

Chosen Answer:
This is a voting comment (?) , you can switch to a simple comment.
Switch to a voting comment New
Nick name: Submit Cancel
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
0
0
0
10