CGF01 Practice Test

CGF01 practice test: what's covered

• CloudGen Firewall Foundation
• v9.x
• Control Center
• TINA
• SD-WAN

Free CGF01 sample questions

1. A network engineer is deploying a new Barracuda CloudGen Firewall (CGF) hardware appliance at a branch office. Which primary network interface is pre-configured out-of-the-box for initial administrative access?

   • A. p1 (or Management / LAN port) with default IP 192.168.200.200
   • B. eth0 with DHCP client enabled by default
   • C. WAN interface assigned via SLAAC IPv6 auto-configuration
   • D. Console port only (serial port with baud rate 9600)
   Show answer

   Correct: A. Out-of-the-box, Barracuda CGF appliances use port p1 (or management interface) pre-configured with IP address 192.168.200.200/24 for initial setup via Firewall Admin. Option B is incorrect because DHCP client is not enabled on management by default. Option C is wrong because SLAAC IPv6 is not configured out-of-the-box. Option D is incorrect because web/GUI access via p1 is available alongside serial console access.

2. An administrator needs to manage multiple Barracuda CGF units across remote sites. Which official application tool is used for direct administration, configuration, and monitoring of CGF boxes?

   • A. Barracuda Firewall Admin (windows native administration utility)
   • B. Web browser accessing HTTP port 80
   • C. Barracuda Network Client CLI tool
   • D. SSH shell terminal using default admin credentials
   Show answer

   Correct: A. Barracuda Firewall Admin is the dedicated Windows administration tool designed to configure, monitor, and troubleshoot CGF appliances and Control Centers. Option B is incorrect because full CGF configuration is not performed via standard web browser HTTP. Option C is wrong because Network Client is an end-user VPN client. Option D is incorrect because SSH terminal access does not provide the full graphical configuration workspace.

3. You are setting up initial management access to a Barracuda CloudGen Firewall appliance. What is the default administrator username for login?

   • A. root administrative user account
   • B. admin standard user account
   • C. administrator domain user account
   • D. system service user account
   Show answer

   Correct: A. The default administrative account name for Barracuda CloudGen Firewall administration is 'root'. Option B (admin) is incorrect because standard web-managed devices use admin, but CGF uses root. Option C (administrator) and Option D (system) are wrong because they are not default account names on Barracuda CGF.

4. A cloud administrator is deploying a Barracuda CGF virtual appliance in Microsoft Azure. Which license type allows the firewall to dynamically validate its license against Barracuda Cloud servers?

   • A. BYOL (Bring Your Own License) or PAYG (Pay-As-You-Go) cloud license
   • B. Static hardware serial key bound to MAC address
   • C. Free evaluation license with unlimited throughput forever
   • D. Perpetual offline node key requiring manual USB activation
   Show answer

   Correct: A. CloudGen Firewall virtual instances in cloud environments support BYOL and PAYG marketplace licensing validated online. Option B is incorrect because static hardware keys bound to physical MAC addresses apply to hardware units, not cloud VMs. Option C is wrong because evaluation licenses expire and have feature/throughput limits. Option D is incorrect because cloud instances use online cloud licensing validation.

5. As a network administrator managing a Barracuda CloudGen Firewall deployment, which collection-of-boxes object in the CGF management hierarchy groups multiple appliances under a common security policy?

   • A. Box object (single appliance configuration level)
   • B. Cluster (logical group of boxes under one Control Center)
   • C. VRF instance (virtual routing domain within a single box)
   • D. PoP network node (external point-of-presence gateway)
   Show answer

   Correct: B. In the Barracuda Control Center hierarchy, a Cluster groups multiple firewall boxes under a shared policy configuration where settings can be inherited and overridden. Option A (Box object) is incorrect because it represents a single hardware or virtual appliance rather than a collection. Option C (VRF instance) is wrong because it isolates routing tables within an individual firewall. Option D (PoP network node) is incorrect because it refers to external network access points.

Last updated: 2026-10-19

CGF01 practice test FAQ