View all questions & answers for the Palo Alto Next-Generation Firewall Engineer Exam Materials exam

Palo Alto Next-Generation Firewall Engineer Exam Materials - Question #57 Discussion

Comment Image Comment Image Comment Image

What is a valid configurable limit for setting resource quotas when defining a new VSYS on a Palo Alto Networks firewall? (Choose one answer)

  • A. Percentage of total CPU utilization
  • B. Maximum number of SSL decryption rules
  • C. Maximum number of virtual routers
  • D. Disk space allocation for logs
Correct Answer: B

Brave-Dump Community Votes

Answer: B (2 votes) 100%

Community Explanations & Comments (2)

Ayesha 9 months ago
Selected: B
The correct answer is B. Maximum number of SSL decryption rules.

Explanation
When configuring a Virtual System (vsys), the Resource Management tab allows you to set quotas (limits) on specific configuration objects and concurrent sessions. This prevents a single vsys from consuming all the available capacity of the physical firewall.

Valid configurable resources include:

Sessions (Maximum and Guaranteed)

Security Rules

NAT Rules

Decryption Rules (This corresponds to Option B)

QoS Rules

Site-to-Site VPN Tunnels
Brave-Dumps.com Admin 9 months ago
Thank you
berry tomatoz 1 month ago
Selected: B
Sessions Limit – max number of concurrent sessions allowed for that vsys (per-dataplane on PA-5200/PA-7000 Series, which can make the effective per-vsys max higher on those platforms)
Security Rules – max number of security policy rules
NAT Rules – max number of NAT rules
Decryption Rules – max number of SSL/SSH decryption rules
QoS Rules – max number of QoS policy rules
Application Override Rules
Policy-Based Forwarding (PBF) Rules
Site-to-Site VPN Tunnels – max number of IPSec/VPN tunnels