Exam NGFW-Engineer topic 1 question 20 discussion

Actual exam question from Palo Alto Networks's NGFW-Engineer

Question #: 20
Topic #: 1

A PA-Series firewall with all licensable features is being installed. The customer’s Security policy requires that users do not directly access websites. Instead, a security device must create the connection, and there must be authentication back to the Active Directory servers for all sessions.
Which action meets the requirements in this scenario?

A. Deploy the transparent proxy with Web Cache Communications Protocol (WCCP).
B. Deploy the Next-Generation Firewalls as normal and install the User-ID agent.
C. Deploy the Advanced URL Filtering license and captive portal.
D. Deploy the explicit proxy with Kerberos authentication scheme.

Show Suggested Answer

Suggested Answer: D 🗳️

by Seidor_Analytics at July 29, 2025, 5:50 a.m.

Comments

Submit Cancel

Kane4555

1 week ago

Selected Answer: D

D. A. Does not fulfill AD requirement B, C. Does not fulfill proxy requirement.

upvoted 1 times

...

Seidor_Analytics

2 weeks, 3 days ago

Selected Answer: A

This seems like a trick question. I'm tentatively choosing A.

upvoted 1 times

...