View all questions & answers for the Palo Alto Next-Generation Firewall Engineer Exam Materials exam


Palo Alto Next-Generation Firewall Engineer Exam Materials-Question 125 Discussion
Comment Image Comment Image Comment Image

A security engineer is troubleshooting a connectivity issue for a specific user whose traffic traverses a firewall managed by Panorama. The engineer wants to perform all diagnostic actions from the central Panorama interface without switching context to the firewall’s local UI. Which set of troubleshooting actions is available to the engineer directly in Panorama? (Choose one answer)

  • A. Modify a local security rule to permit test traffic. Check the firewall’s ARP table via the GUI. View the system logs.
  • B. Configure a new QoS profile. Assign the QoS profile to an interface. Download the firewall’s tech support file.
  • C. Edit the management profile assigned to an interface. Create a new Log Forwarding profile. Commit the changes locally to the firewall.
  • D. Run a packet capture. Access the device’s command-line interface. View the live session table.
Correct Answer: D

Brave-Dump Clients Votes

C 100%

Comments



Anonymous User 2026-07-08 19:22:19

Selected Answers: C


C fits a lot better than other answers
D doesn't work because it needs Context-Switching for PCAPs. Here's an article from Palo Alto: https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA14u000000g1wiCAA&lang=en_US


Anonymous User 2026-07-30 18:23:09

Selected Answers: C


PCAP perform via local not Panorama