Netsums · PAN-OS Practice Quiz

Try 5 questions free — no account needed.Sign in free for 10 questions a day →

Test your Palo Alto NGFW knowledge

Exam-style practice questions with detailed, per-option explanations.

Mode

Topics

Leave all unchecked for every topic, or tick a whole area and/or specific subtopics.

Administration

App-ID(86)
- App-ID and HTTP/2 Inspection(1)
- App-ID Cloud Engine(19)
- Application Level Gateways(3)
- Applications with Implicit Support(2)
- Disable the SIP Application-level Gateway (ALG)(3)
- Maintain Custom Timeouts for Data Center Applications(3)
- Manage Custom or Unknown Applications(4)
- Manage New and Modified App-IDs(10)
- SaaS App-ID Policy Recommendation(2)
- Safely Enable Applications on Default Ports(1)
- Security Policy Rule Optimization(19)
- Streamlined App-ID Policy Rules(1)
- Use Application Objects in Policy(8)
- Use HTTP Headers to Manage SaaS Application Access(10)
Authentication(64)
- Authentication Policy(7)
- Authentication Types(13)
- Configure an Authentication Profile and Sequence(5)
- Configure Kerberos Server Authentication(3)
- Configure Kerberos Single Sign-On(2)
- Configure LDAP Authentication(4)
- Configure Local Database Authentication(1)
- Configure Multi-Factor Authentication(6)
- Configure RADIUS Authentication(2)
- Configure SAML Authentication(5)
- Configure TACACS Accounting(1)
- Configure TACACS+ Authentication(4)
- Connection Timeouts for Authentication Servers(3)
- Plan Your Authentication Deployment(2)
- Pre-Logon for SAML Authentication(2)
- Test Authentication Server Connectivity(2)
- Troubleshoot Authentication Issues(2)
Certificate Management(96)
- Blocking Private Key Export(7)
- Certificate Deployment(13)
- Certificate Revocation(20)
- Configure a Certificate Profile(5)
- Configure an SSH Service Profile(2)
- Configure an SSL/TLS Service Profile(2)
- Configure the Key Size for SSL Forward Proxy Server Certificates(4)
- Default Trusted Certificate Authorities (CAs)(1)
- Export a Certificate and Private Key(2)
- Keys and Certificates(3)
- Master Key Encryption(4)
- Obtain and Import Certificates(6)
- Replace the Certificate for Inbound Management Traffic(3)
- Revoke and Renew Certificates(3)
- Secure Keys with a Hardware Security Module(18)
Certifications(7)
- Access the Maintenance Recovery Tool (MRT)(2)
- Change the Operational Mode to FIPS-CC Mode(1)
- FIPS-CC Security Functions(3)
Device Telemetry(3)
- Manage Device Telemetry(3)
Firewall Administration(114)
- Bootstrap the Firewall(7)
- Launch the Web Interface(22)
- Manage Configuration Backups(12)
- Manage Firewall Administrators(28)
- Reference: Port Number Usage(16)
- Reference: Web Interface Administrator Access(26)
- Reset the Firewall to Factory Default Settings(2)
High Availability(120)
- ARP Load-Sharing(3)
- Configure HA Clustering(4)
- Device Priority and Preemption(3)
- Failover(3)
- Floating IP Address and Virtual MAC Address(2)
- HA Clustering Best Practices and Provisioning(2)
- HA Clustering Overview(2)
- HA Firewall States(5)
- HA Links and Backup Links(7)
- HA Modes(5)
- HA Ports on Palo Alto Networks Firewalls(3)
- HA Timers(3)
- Reference: HA Synchronization(5)
- Session Owner(4)
- Session Setup(4)
- Set Up Active/Active HA(27)
- Set Up Active/Passive HA(36)
Large Scale VPN (LSVPN)(34)
- Configure GlobalProtect Gateways for LSVPN(2)
- Configure the GlobalProtect Portal for LSVPN(11)
- Configure the Portal to Authenticate Satellites(1)
- Create Interfaces and Zones for the LSVPN(4)
- Enable SSL Between GlobalProtect LSVPN Components(8)
- Prepare the Satellite to Join the LSVPN(3)
- Use Case: Advanced LSVPN Configuration with iBGP(1)
- Verify the LSVPN Configuration(1)
Monitoring(173)
- Configure Email Alerts(6)
- Configure Log Forwarding(12)
- Firewall Interface Identifiers in SNMP Managers and NetFlow Collectors(1)
- Forward Logs to an HTTP/S Destination(3)
- Monitor Applications and Threats(2)
- Monitor Block List(2)
- NetFlow Monitoring(11)
- SNMP Monitoring and Traps(21)
- Take Packet Captures(15)
- Use External Services for Monitoring(3)
- Use Syslog for Monitoring(45)
- Use the App Scope Reports(3)
- Use the Application Command Center(12)
- Use the Automated Correlation Engine(6)
- Use the Dashboard(1)
- View and Manage Logs(9)
- View and Manage Reports(17)
- View Policy Rule Usage(2)
NGFW Clustering(6)
- Configure an NGFW Cluster(3)
- NGFW Clusters(1)
- PAN-OS(2)
Subscriptions(13)
- Activate Subscription Licenses(3)
- Enhanced Application Logs for Palo Alto Networks Cloud Services(2)
- Subscriptions You Can Use With the Firewall(3)
- What Happens When Licenses Expire?(5)
User-ID(114)
- Deploy User-ID in a Large-Scale Network(19)
- Enable Policy for Users with Multiple Accounts(1)
- Enable User- and Group-Based Policy(1)
- Enable User-ID(6)
- Map IP Addresses to Users(51)
- Map Users to Groups(6)
- User-ID Concepts(24)
- User-ID Overview(4)
- Verify the User-ID Configuration(2)
Virtual Systems(27)
- Communication Between Virtual Systems(2)
- Configure a Shared Gateway(3)
- Configure Inter-Virtual System Communication within the Firewall(2)
- Configure Virtual Systems(3)
- Customize Service Routes for a Virtual System(4)
- Platform Support and Licensing for Virtual Systems(3)
- Shared Gateway(3)
- Shared Objects for Virtual Systems(1)
- Virtual System Components and Segmentation(2)
Zone Protection and DoS Protection(86)
- DoS Protection Against Flooding of New Sessions(10)
- How Do Zones Protect the Network?(3)
- Network Segmentation Using Zones(2)
- Zone Defense(68)

Getting Started

Best Practices for Getting Started with NGFWs(2)
Configure Your NGFWs(24)
- Assess the NGFW Network Traffic(1)
- Configure the NGFW General Setting(3)
- Configure the NGFW Session Settings(11)
- Enable Free WildFire Forwarding on the NGFW(5)
- Set Up a Basic Security Policy for the NGFW(4)
Device Setup for Cloud Managed Devices(11)
- Configure the Auxiliary Interface Settings(1)
- Configure the Firewall General Settings(4)
- Configure the Management Interface Settings(3)
- Local Configuration Management for NGFWs(2)
Get Started with NGFWs(6)
- Determine Your NGFW Management Strategy(5)
Integrate NGFWs into Your Network(5)
- Determine Your Access Strategy for Business Continuity(1)
- Determine Your Management Strategy(1)
Manage Your NGFW Resources(1)
- Decommission a Firewall(1)
Manage Your NGFWs(6)
- Register Your NGFW(2)
- Update NGFWs Managed by Strata Cloud Manager(2)
NGFW Compatible Subscriptions(17)
- Activate Subscription Licenses(4)
- Enhanced Application Logs for Palo Alto Networks Cloud Services(1)
- What Happens When Licenses Expire?(5)
Onboard Your NGFWs(3)
- Onboard ZTP Firewalls(1)
Perform the Initial Setup and Configuration for NGFWs(26)
- Assess Network Traffic(2)
- Enable Free WildFire Fowarding on Your NGFW(5)
- Segment Your Network for a Reduced Attack Surface(6)
- Set Up a Basic Security Policy(5)
- Set Up Network Access for External Services(4)
Segment Your Network Using Interfaces and Zones(9)
- Configure Interfaces and Zones on the NGFW(4)
- Network Segmentation for a Reduced Attack Surface(3)
Set Up Your NGFWs(8)
- Create a New Support Account(1)
- Perform Initial Configuration for an Air Gapped Firewall(2)
- Perform the Initial Configuration for a NGFW(3)
- Register Your NGFW(1)
- Set Up Network Access for External Services(1)
Strata Cloud Manager(1)
- Strata Cloud Manager Activation & Onboarding(1)

Networking

Advanced Routing(58)
- Configure a Logical Router(3)
- Configure a Loopback Interface(1)
- Configure a Tunnel Interface(2)
- Configure BGP on an Advanced Routing Engine(2)
- Configure IPv4 Multicast(5)
- Configure MSDP(2)
- Configure OSPFv2 on an Advanced Routing Engine(7)
- Configure OSPFv3 on an Advanced Routing Engine(5)
- Configure RIPv2 on an Advanced Routing Engine(2)
- Create a Static Route(5)
- Create an IPv4 MRoute(2)
- Create BFD Profiles(4)
- Create BGP Routing Profiles(4)
- Create Filters for the Advanced Routing Engine(5)
- Create Multicast Routing Profiles(2)
- Create OSPF Routing Profiles(2)
- Create OSPFv3 Routing Profiles(3)
- Create RIPv2 Routing Profiles(1)
- Enable Advanced Routing(1)
Auto VPN(1)
- Refresh a Pre-Shared Key(1)
BFD(19)
- BFD for Static Routes(4)
- BFD for Dynamic Routing Protocols(3)
- Configure BFD(3)
- Reference: BFD Details(4)
BGP(15)
- BGP Confederations(3)
- Configure a BGP Peer with MP-BGP for IPv4 Multicast(2)
- Configure a BGP Peer with MP-BGP for IPv4 or IPv6 Unicast(2)
- Configure BGP(6)
Configure Interfaces(61)
- Cellular Interfaces(1)
- Configure a Breakout Port Interface and Subinterface(3)
- Configure a PPPoE Client on a Subinterface(9)
- Configure an Aggregate Interface Group(3)
- Configure an IPv6 PPPoE Client(4)
- Configure Bonjour Reflector for Network Segmentation(1)
- Layer 2 Interfaces(5)
- Layer 3 Interfaces(8)
- Tap Interfaces(5)
- Use Interface Management Profiles to Restrict Access(5)
- Virtual Wire Interfaces(14)
Configure RIP(1)
Configure Route Redistribution(1)
Configure Service Routes(2)
Configure Virtual Routers(3)
DDNS(4)
- Configure Dynamic DNS for Firewall Interfaces(2)
DHCP(32)
- Clear DHCP Leases(1)
- Configure an Interface as a DHCP Relay Agent(1)
- Configure an Interface as a DHCP Server(2)
- Configure an Interface as a DHCPv4 Client(2)
- Configure an Interface as a DHCPv6 Client with Prefix Delegation(4)
- Configure the Management Interface as a DHCP Client(5)
- Configure the Management Interface for Dynamic IPv6 Address Assignment(3)
- DHCP Messages(2)
- DHCP Options(1)
- DHCP Address Allocation Methods(4)
- DHCP Leases(2)
- Dynamic IPv6 Addressing on the Management Interface(1)
- Firewall as a DHCPv6 Client(1)
- View DHCP Client Information(1)
- View DHCP Server Information(1)
DNS(14)
- Configure a DNS Proxy Object(1)
- Configure a Web Proxy(3)
- Use Case 1: Firewall Requires DNS Resolution(5)
- Use Case 2: ISP Tenant Uses DNS Proxy to Handle DNS Resolution for Security Policies, Reporting, and Services within its Virtual System(1)
- Use Case 3: Firewall Acts as DNS Proxy Between Client and Server(1)
ECMP(12)
- Configure ECMP on a Virtual Router(5)
- ECMP Load-Balancing Algorithms(5)
- Enable ECMP for Multiple BGP Autonomous Systems(1)
Fail Open(3)
- Configure Fail Open(2)
GRE Tunnels(7)
- Create a GRE Tunnel(2)
- Create a GRE Tunnel over a Cellular Interface(2)
IP Multicast(31)
- Configure IP Multicast(8)
- IGMP(5)
- PIM(13)
- View IP Multicast Information(3)
LLDP(7)
- Supported TLVs in LLDP(4)
- View LLDP Settings and Status(1)
NAT(59)
- Configure NAT(28)
- Dataplane NAT Memory Statistics(1)
- Destination NAT(2)
- Destination NAT Example—One-to-Many Mapping(1)
- Destination NAT Example—One-to-One Mapping(3)
- Destination NAT with DNS Rewrite Use Cases(6)
- Destination NAT with Port Translation Example(2)
- Dynamic IP and Port NAT Oversubscription(1)
- NAT Policy Rules(4)
- Source and Destination NAT Example(1)
- Source NAT(4)
- Virtual Wire Source NAT Example(2)
- Virtual Wire Static NAT Example(1)
NAT64(20)
- Configure NAT64 for IPv4-Initiated Communication(3)
- Configure NAT64 for IPv4-Initiated Communication with Port Translation(2)
- Configure NAT64 for IPv6-Initiated Communication(3)
- DNS64 Server(3)
- IPv6-Initiated Communication(4)
- Path MTU Discovery(2)
Network Packet Broker(15)
- Configure Routed Layer 3 Security Chains(4)
- Configure Transparent Bridge Security Chains(2)
- How Network Packet Broker Works(3)
- Limitations of Network Packet Broker(2)
- Prepare to Deploy Network Packet Broker(1)
- User Interface Changes for Network Packet Broker(2)
NPTv6(15)
- Create an NPTv6 Policy(4)
- How NPTv6 Works(5)
- NDP Proxy(1)
- NPTv6 and NDP Proxy Example(1)
OSPF(16)
- Configure OSPF(4)
- Configure OSPF Graceful Restart(3)
- Configure OSPFv3(2)
- Confirm OSPF Operations(3)
PoE(1)
Session Settings and Timeouts(38)
- Change the Session Distribution Policy and View Statistics(1)
- Configure Session Settings(9)
- Configure Session Timeouts(4)
- Configure VPN Session Settings(3)
- Control Specific ICMP or ICMPv6 Types and Codes(2)
- ICMP(5)
- Prevent TCP Split Handshake Session Establishment(2)
- TCP(8)
- UDP(2)
Static Routes(18)
- Configure a Static Route(4)
- Configure Path Monitoring for a Static Route(5)
- Static Route Removal Based on Path Monitoring(5)
Tunnel Content Inspection(15)
- Configure Tunnel Content Inspection(4)
- Create a Custom Report Based on Tagged Tunnel Traffic(1)
- Tunnel Acceleration Behavior(1)
- Tunnel Content Inspection Overview(4)
- View Tunnel Information in Logs(1)

PAN-OS CLI Quick Start

CLI Changes in PAN-OS 11.1+(1)
- Set Commands Removed in PAN-OS 11.2(1)
CLI Cheat Sheet: Device Management(4)
CLI Cheat Sheet: Networking(4)
CLI Cheat Sheet: Panorama(4)
CLI Cheat Sheet: User-ID(3)
CLI Cheat Sheet: Virtual Systems (Vsys)(2)
Get Started with the CLI(19)
- Change CLI Modes(2)
- Customize the CLI(4)
- Find a Command(1)
- Get Help on Command Syntax(1)
- Give Administrators Access to the CLI(7)
- Refresh SSH Keys and Configure Key Options for Management Interface Connection(3)
- Verify SSH Connection to Firewall(1)
Use the CLI(14)
- CLI Jump Start(3)
- Commit Configuration Changes(3)
- Load a Partial Configuration(1)
- Load Configuration Settings from a Text File(2)
- Modify the Configuration(1)
- Test the Configuration(3)
- View Settings and Statistics(1)

Difficulty

Length

1,581 questions available

Practice questions generated from public Palo Alto NGFW documentation. Not affiliated with or endorsed by Palo Alto Networks.