Paloalto Networks ACE Dumps -Valid Paloalto Networks ACE Exam Questions

Quesons & Answers PDF

Page 1

Palo Alto Networks ACE Exam Accredited Configuration Engineer (ACE)

Thank You For Downloading ACE Exam PDF Demo

You can also try our ACE pracce exam soware

Download Free Demo:

https://www.dumps4success.com/ACE.html

https://www.dum https://www.dumps4success.com/ACE.htm ps4success.com/ACE.htmll


Page 2

Version: 12.0 Queston: 1 A Security policy rule displayed in italic font indicates which condion? A. The rule has been overridden. B. The rule is a clone. C. The rule is disabled. D. The rule is acve.

Answer: C Queston: 2 An Anvirus Security Prole species Acons and WildFire Acons. Wildre Acons enable you to congure the rewall to perform which operaon? A. Block trac when a WildFire virus signature is detected. B. Download new anvirus signatures from WildFire. C. Upload trac to WildFire when a virus is suspected. D. Delete packet data when a virus is suspected.

Answer: A Queston: 3 An Interface Management Prole can be aached to which two interface types? (Choose two.) A. Loopback B. Virtual Wire C. Layer 2 D. Layer 3 E. Tap

Answer: A, B, D Queston: 4 AppID running on a rewall idenes applicaons using which three methods? (Choose three.)



Page 3

A. Applicaon signatures B. Known protocol decoders C. WildFire lookups D. Program heuriscs E. PANDB lookups

Answer: A, B, D Queston: 5 Applicaon block pages can be enabled for which applicaons? A. any B. MGT portbased C. nonTCP/IP D. webbased

Answer: D Queston: 6 Because a rewall examines every packet in a session, a rewall can detect applicaon ________? A. shis B. groups C. lters D. errors

Answer: D Queston: 7 Finding URLs matched to the notresolved URL category in the URL Filtering log le might indicate that you should take which acon? A. Reboot the rewall. B. Validate connecvity to the PAN-DB cloud. C. Redownload the URL seed database. D. Validate Validate your Security policy rule s.

Answer: B Queston: 8 For which rewall feature should you create forward trust and forward untrust cercates?



Page 4

A. SSH decrypon B. SSL clientside cercate checking C. SSL Inbound Inspecon decrypon D. SSL forward proxy decrypon

Answer: D Queston: 9 If a DNS sinkhole is congured, any sinkhole acons indicang a potenally infected host are recorded in which log type? A. Trac B. WildFire Submissions C. Data Filtering D. Threat

Answer: D Queston: 10 If there is an HA conguraon mismatch between rewalls during peer negoaon, which state will the passive rewall enter? A. INITIAL B. NONFUNCTIONAL C. PASSIVE D. ACTIVE

Answer: B Queston: 11 In a desna desnaon on NAT NAT congu congura raon on,, which which opon opon accur accurate ately ly complet completes es the follow following ing senten sentence? ce? A Security policy rule should be wrien to match the _______. A. postNAT source and desnaon addresses, but the preNAT desnaon zone B. original preNAT preNAT source and desnaon addresses, but the postNAT postNAT desnaon zone C. original origi nal preNAT source source and desnaon addresses, and the preNAT desnaon zone D. postNAT source and desnaon addresses, and the postNAT desnaon zone

Answer: B Queston: 12 https://www.dum https://www.dumps4success.com/ACE.htm ps4success.com/ACE.htmll


Page 5

In a Security Prole, which acon does a rewall take when the proles proles acon is congured as Reset Server? (Choose two.) A. The trac responder is reset. B. The client is reset. C. For UDP sessions, the connecon is reset. D. For UDP sessions, the connecon is dropped.

Answer: D Queston: 13 In an HA congu congura raon on,, which which three three compon component entss are synch synchro roniz nized ed between between the pair pair of rewa rewalls? lls? (Choose three.) A. logs B. objects C. policies D. networks

Answer: B, C, D Queston: 14 In an HA conguraon, which three funcons are associated with the HA 1 Control Link? (Choose three.) A. exchanging hellos B. exchanging heartbeats C. synchronizing sessions D. synchronizing conguraon

Answer: A, B, D Queston: 15 On a rewall that has 32 Ethernet ports and is congured with a dynamic IP and port (DIPP) NAT oversubscripon rate of 2x, what is the maximum number of concurrent sessions supported by each available IP address? A. 32 B. 64 C. 64K D. 128K



Page 6

Answer: A Queston: 16 The Threat log records events from which three Security P roles? (Choose three.) A. Vulnerability Protecon B. Anvirus C. URL Filtering D. WildFire Analysis E. File Blocking F. AnSpyware

Answer: B, C, D Queston: 17 The UserID feature is enabled per __________? A. rewall B. UserID agent C. rewall interface D. rewall security zone

Answer: D Queston: 18 The WildFire Portal website supports which three operaons? (Choose three.) A. report incorrect verdicts B. upload les to WildFire for analysis C. request rewall WildFire licenses D. view WildFire verdicts

Answer: A, B, D Queston: 19 What are the two separate planes that make up the PAN-OS architecture? (Choose two.) A. dataplane B. roung plane C. signature processing plane D. HA plane



Page 7

E. control/management plane

Answer: A, E Queston: 20 What are three connecon methods for the GlobalProtect agent? (Choose three.) A. PreLogon B. Captcha portal C. UserLogon D. Ondemand

Answer: A, C, D



Page 8



Page 9

Thank You For Trying ACE PDF Demo

To try our ACE pracce exam soware visit link below https://www.dumps4success.com/ACE.html

Start Your ACE Preparation Use Coupon “20OFF “ 20OFF”” for extra 20% discount on the purchase of Practice Test Software. Test your ACE preparation with actual exam questions.


Paloalto Networks ACE Dumps -Valid Paloalto Networks ACE Exam Questions

Recommend Documents