Exam NGFW-Engineer topic 1 question 34 discussion

Actual exam question from Palo Alto Networks's NGFW-Engineer

Question #: 34
Topic #: 1

An engineer at a managed services provider is updating an application that allows its customers to request firewall changes to also manage SD-WAN. The application will be able to make any approved changes directly to devices via API.
What is a requirement for the application to create SD-WAN interfaces?

A. REST API’s “sdwanInterfaceprofiles” parameter on a Panorama device
B. REST API’s “sdwanInterfaces” parameter on a firewall device
C. XML API’s “sdwanprofiles/interfaces” parameter on a Panorama device
D. XML API’s “InterfaceProfiles/sdwan” parameter on a firewall device

Show Suggested Answer

Suggested Answer: A 🗳️

by Seidor_Analytics at July 29, 2025, 5:51 a.m.

Comments

Submit Cancel

Alekhine1986

4 hours, 32 minutes ago

Selected Answer: B

Create profile (optional — defines link characteristics),Create interface (mandatory).

upvoted 1 times

...

Eiffelsturm

3 days ago

Selected Answer: A

https://docs.paloaltonetworks.com/ngfw/api/pan-os-rest-api-use-cases/configure-virtual-sd-wan-interface-rest-api states "how to create a virtual SD-WAN interface on Panorama". So REST API + Panorama = A

upvoted 1 times

...

Bronzon_2948

1 week, 5 days ago

Selected Answer: B

It should be B To create SD-WAN interfaces via API, the application must use the REST API on the firewall (not Panorama) because SD-WAN interfaces are configured locally on the firewall. The relevant REST API endpoint includes the sdwanInterfaces parameter, which allows you to define SD-WAN interface settings such as link type, bandwidth, and path monitoring.

upvoted 1 times

...

pagani5005

2 months, 2 weeks ago

Selected Answer: A

Answer is A. https://docs.paloaltonetworks.com/ngfw/api/pan-os-rest-api-use-cases/configure-virtual-sd-wan-interface-rest-api You use the panorama REST API to create the sdwan interface. sdwan is always managed by panorama!

upvoted 3 times

...