View all questions & answers for the Palo Alto Next-Generation Firewall Engineer Exam Materials exam

Palo Alto Next-Generation Firewall Engineer Exam Materials-Question 143 Discussion

Which set of interface types is exclusively supported for inclusion in a link group? (Choose one answer)

A. Layer 2, Layer 3, virtual wire
B. Layer 2, high availability (HA), virtual wire
C. Layer 3, TAP, tunnel
D. Layer 2, Layer 3, tunnel

Correct Answer: D

Brave-Dump Clients Votes

A 66.67%

B 33.33%

Comments

Anonymous User 2026-08-01 19:07:04

Selected Answers: A

I don't sure meaning of "link group" is aggregate. If yes = A correct.

https://docs.paloaltonetworks.com/ngfw/networking/configure-interfaces/configure-an-aggregate-interface-group

1. Select NetworkInterfacesEthernet and Add Aggregate Group.
2. In the field adjacent to the read-only Interface Name, enter a number to identify the aggregate group. The range is 1 to the maximum number of aggregate interface groups supported by the firewall.
3. For the Interface Type, select HA, Virtual Wire, Layer2, or Layer3.

berry tomatoz 2026-09-13 10:26:30

Selected Answers: A

An Aggregate Ethernet (AE) interface group on Palo Alto firewalls uses IEEE 802.1AX/802.3ad link aggregation to bundle multiple physical Ethernet interfaces into one logical interface. The supported interface types for the group are:

>Layer 2
>Layer 3
>Virtual Wire
>HA3 (the packet-forwarding link in an Active/Active High Availability configuration)

Anonymous User 2026-09-26 21:48:59

Selected Answers: B

Both A and B seems valid to me, but i will go with A anyway

https://docs.paloaltonetworks.com/ngfw/networking/configure-interfaces/configure-an-aggregate-interface-group

1. Select NetworkInterfacesEthernet and Add Aggregate Group.
2. In the field adjacent to the read-only Interface Name, enter a number to identify the aggregate group. The range is 1 to the maximum number of aggregate interface groups supported by the firewall.
3. For the Interface Type, select HA, Virtual Wire, Layer2, or Layer3.