Palo Alto BGP Quiz

1. Within which configuration section of a Palo Alto firewall is BGP primarily configured?

Device > BGP
Network > Virtual Routers > [VR Name] > BGP
Network > Interfaces > BGP
Policies > BGP Policies

2. What is the main difference between eBGP and iBGP?

eBGP runs within the same AS, iBGP runs between different ASes.
eBGP runs between different ASes, iBGP runs within the same AS.
eBGP uses TCP port 179, iBGP uses UDP port 179.
eBGP requires full mesh, iBGP does not.

3. Which component is mandatory for enabling BGP within a Virtual Router?

A configured Peer Group
An Export Rule
A Router ID and Local AS number
A Redistribution Profile

4. What is the purpose of a BGP Peer Group on a Palo Alto firewall?

To group interfaces that participate in BGP.
To apply common configuration parameters to multiple BGP peers.
To define the Autonomous System number.
To monitor BGP session status for a group of routers.

5. How are networks typically advertised into BGP on a Palo Alto firewall?

Using the `network` command directly under the BGP configuration.
By enabling BGP on the relevant interfaces.
Through Redistribution Profiles importing routes from other protocols or sources.
Automatically for all connected subnets in the Virtual Router.

6. What Palo Alto component is used to control which routes learned via BGP are installed into the firewall's routing table?

Export Rules
Redistribution Profiles
Import Rules
Security Policies

7. What Palo Alto component is used to control which routes from the firewall's routing table are advertised to BGP peers?

Import Rules
Export Rules
Peer Groups
Conditional Advertisement

8. Which BGP attribute is primarily used to influence route selection *within* the same Autonomous System?

AS Path
MED (Multi-Exit Discriminator)
Local Preference
Community

9. Which BGP attribute is typically used to influence how *other* Autonomous Systems choose routes towards your AS?

Local Preference
MED (Multi-Exit Discriminator)
Origin
Next Hop

10. What is the purpose of BGP AS Path Prepending?

To make a path appear shorter and more preferable.
To filter routes based on AS numbers.
To artificially lengthen the AS Path, making the route less preferable to eBGP peers.
To summarize multiple AS numbers into one.

11. In a Palo Alto Active/Passive HA pair, which firewall typically establishes the BGP sessions?

Only the Active firewall.
Only the Passive firewall.
Both firewalls establish sessions simultaneously.
Neither, BGP is not supported in HA.

12. What does setting the "Enable MP-BGP" option under BGP > Basic allow?

Enables BGP Multi-path routing.
Enables the exchange of routing information for multiple network layer protocols (e.g., IPv6, VPNv4).
Increases the maximum number of BGP peers.
Enables MD5 authentication for all peers.

13. Which CLI command is used to view the status of BGP peers on a Palo Alto firewall?

`show routing protocol bgp peers`
`show routing protocol bgp summary`
`show routing protocol bgp peer `
`show routing protocol bgp neighbor`

14. What is the default administrative distance for routes learned via eBGP on a Palo Alto firewall?

10
20
100
200

15. What is the default administrative distance for routes learned via iBGP on a Palo Alto firewall?

20
90
170
200

16. What is the purpose of the BGP "Remove Private AS" option often applied to eBGP peers?

To prevent private IP addresses from being advertised.
To strip private AS numbers (64512-65534) from the AS_PATH before advertising to an eBGP peer.
To remove the local AS number before advertising routes.
To block BGP updates from peers using private AS numbers.

17. If an iBGP peer is multiple hops away, what configuration setting is typically required on the Palo Alto firewall?

Increase Keepalive timer
Enable MP-BGP
Configure Multihop > TTL
Set a higher Local Preference

18. Which BGP timer determines how often Keepalive messages are sent?

Hold Time
Keep Alive Interval
Connect Retry Interval
Advertisement Interval

19. What happens if a BGP router does not receive a Keepalive or Update message from its peer within the configured Hold Time?

It sends a query message to the peer.
It reduces the Local Preference for routes from that peer.
It considers the peer down and removes routes learned from it.
It doubles the Keep Alive interval.

20. What feature allows a Palo Alto firewall to advertise a network prefix to BGP peers only if another specific prefix exists in its routing table?

Redistribution Profile with Filter
Export Rule with "Used By" Condition
Conditional Advertisement
Import Rule with Action "Allow"

21. What BGP state indicates that the TCP connection is established, and the peers are exchanging OPEN messages?

Idle
Connect
Active
OpenSent/OpenConfirm

22. What BGP state indicates a successful peering relationship where route updates can be exchanged?

OpenConfirm
Active
Established
Connect

23. In Palo Alto, BGP configuration is tied to which specific network object?

Security Zone
Virtual Router
Interface Management Profile
GlobalProtect Gateway

24. Which BGP attribute is a well-known mandatory attribute?

MED
Local Preference
Community
AS_PATH

25. What is the primary mechanism iBGP uses to prevent routing loops within an AS?

TTL check
Administrative Distance
Split Horizon rule (never advertises a route learned from an iBGP peer to another iBGP peer)
MED attribute

26. Which feature can mitigate the iBGP full-mesh requirement?

BGP Communities
Route Reflectors or Confederations
AS Path Prepending
Conditional Advertisement

27. On a Palo Alto firewall, where would you configure BGP route dampening?

Under the Peer Group configuration
Under the BGP > Dampening Profiles section
Within an Import Rule action
Within a Redistribution Profile

28. What is the purpose of BGP Graceful Restart?

To quickly restart the BGP process if it crashes.
To allow a BGP speaker to restart its BGP process without causing its peers to drop routes immediately.
To gracefully shut down a BGP session before maintenance.
To automatically re-establish a BGP session after a link flap.

29. Which CLI command helps verify which routes learned via BGP are being installed into the Palo Alto routing table (RIB)?

`show routing protocol bgp rib-in`
`show routing protocol bgp rib-out`
`show routing route protocol bgp`
`show routing fib protocol bgp`

30. If you configure both an Import Rule and a Dampening Profile, which is applied first to an incoming BGP route?

The Dampening Profile is applied first.
The Import Rule is applied first.
They are applied simultaneously.
The order depends on the configuration sequence.

Palo Alto Networks BGP Quiz

Quiz Results