nerdexam
Palo_Alto_Networks

NGFW-ENGINEER · Question #109

What is a valid configurable limit for setting resource quotas when defining a new VSYS on a Palo Alto Networks firewall?

The correct answer is B. Maximum number of SSL decryption rules. When creating or editing a virtual system (VSYS) on a Palo Alto Networks firewall, administrators can set resource quotas that cap the number of policy rules of specific types allowed within that VSYS. The maximum number of SSL decryption rules (B) is a valid resource quota…

Virtualization and Resource Management

Question

What is a valid configurable limit for setting resource quotas when defining a new VSYS on a Palo Alto Networks firewall?

Options

  • APercentage of total CPU utilization
  • BMaximum number of SSL decryption rules
  • CMaximum number of virtual routers
  • DDisk space allocation for logs

How the community answered

(48 responses)
  • A
    4% (2)
  • B
    92% (44)
  • C
    2% (1)
  • D
    2% (1)

Explanation

When creating or editing a virtual system (VSYS) on a Palo Alto Networks firewall, administrators can set resource quotas that cap the number of policy rules of specific types allowed within that VSYS. The maximum number of SSL decryption rules (B) is a valid resource quota that can be set per VSYS, preventing any single VSYS from consuming all available policy rule slots. CPU utilization percentage (A) is not a per-VSYS configurable quota - CPU is managed at the platform level. Virtual routers (C) are shared platform resources and are not quota-limited per VSYS in this manner. Disk space allocation for logs (D) is managed through log storage quotas at a different configuration level, not through the VSYS resource quota settings.

Topics

#VSYS#Resource Management#Palo Alto Configuration#Quota Limits

Community Discussion

No community discussion yet for this question.

Full NGFW-ENGINEER Practice