Palo Alto Networks Next-Generation Firewall Engineer Questions and Answers
Question 13
Which CLI command is used to configure the management interface as a DHCP client?
Options:
A.
set network dhcp interface management
B.
set network dhcp type management-interface
C.
set deviceconfig system type dhcp-client
D.
set deviceconfig management type dhcp-client
Answer:
D
Explanation:
To configure the management interface as a DHCP client on a Palo Alto Networks NGFW, the correct CLI command is set deviceconfig management type dhcp-client.
This command configures the management interface to obtain an IP address dynamically using DHCP.
Question 14
In regard to the Advanced Routing Engine (ARE), what must be enabled first when configuring a logical router on a PAN-OS firewall?
Options:
A.
License
B.
Plugin
C.
Content update
D.
General setting
Answer:
A
Explanation:
To enable the Advanced Routing Engine (ARE) on a Palo Alto Networks firewall, the license for the ARE must be applied first. Without the proper license, the firewall cannot activate and use the advanced routing features provided by ARE, such as support for more complex routing protocols (e.g., BGP, OSPF, etc.).
Once the license is applied and validated, the routing engine can be configured, allowing the creation of logical routers and routing policies.