Reliable ACE Dumps Questions Available as Web-Based Practice Test Engine [Q13-Q31]

5/5 - (1 vote)

Reliable ACE Dumps Questions Available as Web-Based Practice Test Engine

Correct and Up-to-date Aviatrix ACE BrainDumps

NEW QUESTION 13
What are two sources of information for determining if the firewall has been successful in communicating with an
external User-ID Agent?

System Logs and the indicator light under the User-ID Agent settings in the firewall

There’s only one location – System Logs

There’s only one location – Traffic Logs

System Logs and indicator light on the chassis

NEW QUESTION 14
What option should be configured when using User Identification?

Enable User Identification per Zone

Enable User Identification per Security Rule

Enable User Identification per interface

None of the above

NEW QUESTION 15
A “Continue” action can be configured on which of the following Security Profiles?

URL Filtering and File Blocking

URL Filtering only

URL Filtering, File Blocking, and Data Filtering

URL Filtering and Anti-virus

NEW QUESTION 16
You’d like to schedule a firewall policy to only allow a certain application during a particular time of day.
Where can this policy option be configured?

Policies > Security > Service

Policies > Security > Options

Policies > Security > Application

Policies > Security > Profile

NEW QUESTION 17
If the Forward Proxy Ready shows “no” when running the command show system setting ssl-decrypt setting, what is most likely the cause?

SSL forward proxy certificate is not generated

Web interface certificate is not generated

Forward proxy license is not enabled on the box n

SSL decryption rule is not created

NEW QUESTION 18
Match the issues of deploying firewalls in public cloud to appropriate problem statement.

NEW QUESTION 19
How do you limit the amount of information recorded in the URL Content Filtering Logs?

Enable DSRI

Disable URL packet captures

Enable URL log caching

Enable Log container page only

NEW QUESTION 20
Without a WildFire subscription, which of the following files can be submitted by the Firewall to the hosted WildFire virtualized sandbox?

PE files only

PDF files only

MS Office doc/docx, xls/xlsx, and ppt/pptx files only

PE and Java Applet (jar and class) only

NEW QUESTION 21
Which of the following is NOT a valid option for built-in CLI access roles?

read/write

superusers

vsysadmin

deviceadmin

NEW QUESTION 22
Color-coded tags can be used on all of the items listed below EXCEPT:

Address Objects

Zones

Service Groups

Vulnerability Profiles

NEW QUESTION 23
Besides selecting the Heartbeat Backup option when creating an ActivePassive
HA Pair, which of the following also prevents “SplitBrain”?

Creating a custom interface under Service Route Configuration, and assigning this interface as the backup HA2 link.

Under “Packet Forwarding”, selecting the VR Sync checkbox.

Configuring an independent backup HA1 link.

Configuring a backup HA2 link that points to the MGT interface of the other device in the pair.

NEW QUESTION 24
What is the default setting for ‘Action’ in a Decryption Policy’s rule?

No-decrypt

Decrypt

Any

None

NEW QUESTION 25
Which of the following CANNOT use the source user as a match criterion?

Policy Based Forwarding

Secuirty Policies

QoS

DoS Protection

Antivirus Profile

NEW QUESTION 26
Which of the following are necessary components of a GlobalProtect solution?

GlobalProtect Gateway, GlobalProtect Agent, GlobalProtect Portal

GlobalProtect Gateway, GlobalProtect Agent, GlobalProtect Server

GlobalProtect Gateway, GlobalProtect NetConnect, GlobalProtect Agent, GlobalProtect Portal, GlobalProtect Server

GlobalProtect NetConnect, GlobalProtect Agent, GlobalProtect Portal, GlobalProtect Server

NEW QUESTION 27
When allowing an Application in a Security policy on a PAN-OS 5.0 device, would a dependency Application need to also be enabled if the application does not employ HTTP, SSL, MSRPC, RPC, t.120, RTSP, RTMP, and NETBIOS-SS.

Yes

NEW QUESTION 28
Which statement is true about a URL Filtering Profile continue password?

There is a password per firewall administrator account.

There is a password per session.

There is a single, per-firewall password.

There is a password per website.

NEW QUESTION 29
In a Palo Alto Networks firewall, every interface in use must be assigned to a zone in order to process traffic.

True

False

NEW QUESTION 30
“What is the result of an Administrator submitting a WildFire report’s verdict back to Palo Alto Networks as
“Incorrect”?

The signature will be updated for False positive and False negative files in the next AV signature update.

The signature will be updated for False positive and False negative files in the next Application signature update.

You will receive an email to disable the signature manually.

You will receive an update within 15 minutes.

NEW QUESTION 31
Match the Azure transit option below to the description which best describes it:
DRAG THE BOXES TO MATCH THE ANSWERS

Loading …

100% Reliable Microsoft ACE Exam Dumps Test Pdf Exam Material: https://www.testsimulate.com/ACE-study-materials.html

Leave a Reply Cancel reply