[Aug 24, 2023] Get Up-To-Date Real Exam Questions for ACE with New Materials [Q18-Q42]

4/5 - (1 vote)

[Aug 24, 2023] Get Up-To-Date Real Exam Questions for ACE with New Materials

Updated ACE Certification Exam Sample Questions

QUESTION 18
What is the name of the debug save file for IPSec VPN tunnels?

set vpn all up

test vpn ike-sa

request vpn IPsec-sa test

Ikemgr.pcap

QUESTION 19
When configuring Admin Roles for Web UI access, what are the available access levels?

Enable and Disable only

None, Superuser, Device Administrator

Allow and Deny only

Enable, Read-Only and Disable

QUESTION 20
A Config Lock may be removed by which of the following users? (Select all correct answers.)

The administrator who set it

Device administrators

Any administrator

Superusers

QUESTION 21

Taking into account only the information in the screenshot above, answer the following question.
An administrator is using SSH on port 3333 and BitTorrent on port 7777.
Which statements are true?

The BitTorrent traffic will be allowed.

The SSH traffic will be allowed.

The SSH traffic will be denied.

The BitTorrent traffic will be denied.

QUESTION 22
When an interface is in Tap mode and a policy action is set to block, the interface will send a TCP reset.

True

False

QUESTION 23
To create a custom signature object for an Application Override Policy, which of the following fields are mandatory?

Category

Regular Expressions

Ports

Characteristics

QUESTION 24
Which of the Dynamic Updates listed below are issued on a daily basis?

Global Protect

URL Filtering

Antivirus

Applications and Threats

QUESTION 25
Which of the following services are enabled on the MGT interface by default? (Select all correct answers.)

HTTPS

SSH

Telnet

HTTP

QUESTION 26
An interface in Virtual Wire mode must be assigned an IP address.

True

False

QUESTION 27
Private, Public, Transit VIFs (Virtual interfaces) are terms related to which…
SELECT THE CORRECT ANSWER

Azure ExpressRoute

AWS Virtual Private Gateway (VGW)

AWS DirectConnect

AWS Transit Gateway

QUESTION 28
UserID-is enabled in the configuration of …

A Security Profile.

An Interface.

A Security Policy.

A Zone.

QUESTION 29
ACE Inc. has a VNet-A hosting Database services which is peered with several app VNets. There is a new requirement to add another CIDR to VNet-A. How can you prevent a database connectivity outage for all the peered VNets while performing this task?

Use powershell to update the VNet-A CIDR

You cannot add a CIDR to a VNet after It has been created

It’s not possible to perform this action without an outage as you need to delete all existing peering before new CIDR can be added

First modify peering routes for all the VNets to add the new CIDR and then add the new CIDR to VNET-A

QUESTION 30
Application block pages can be enabled for which applications?

any

MGT port*based

non*TCP/IP

web*based

QUESTION 31
Which of the following would be a reason to use an XML API to communicate with a Palo Alto Networks firewall?

So that information can be pulled from other network resources for User-ID

To allow the firewall to push UserID information to a Network Access Control (NAC) device.

To permit sys logging of User Identification events

QUESTION 32
After the installation of the Threat Prevention license, the firewall must be rebooted.

True

False

QUESTION 33
A “Continue” action can be configured on the following Security Profiles:

URL Filtering, File Blocking, and Data Filtering

URL Filteringn

URL Filtering and Antivirus

URL Filtering and File Blocking

QUESTION 34
You have decided to implement a Virtual Wire Subinterface. Which options can be used to classify traffic?

Either VLAN tag or IP address, provided that each tag or ID is contained in the same zone.

Subinterface ID and VLAN tag only

By Zone and/or IP Classifier

VLAN tag, or VLAN tag plus IP address (IP address, IP range, or subnet).

QUESTION 35
As a Palo Alto Networks firewall administrator, you have made unwanted changes to the Candidate configuration. These changes may be undone by Device > Setup > Operations > Configuration Management>…. and then what operation?

Revert to Running Configuration

Revert to last Saved Configuration

Load Configuration Version

Import Named Configuration Snapshot

QUESTION 36
Which statement accurately reflects the functionality of using regions as objects in Security policies?

Predefined regions are provided for countries, not but not for cities. The administrator can set up custom regions,
including latitude and longitude, to specify the geographic position of that particular region.

The administrator can set up custom regions, including latitude and longitude, to specify the geographic position of
that particular region. These custom regions can be used in the “Source User” field of the Security Policies.

Regions cannot be used in the “Source User” field of the Security Policies, unless the administrator has set up
custom regions.

The administrator can set up custom regions, including latitude and longitude, to specify the geographic position of
that particular region. Both predefined regions and custom regions can be used in the “Source User” field.

QUESTION 37
When setting up GlobalProtect, what is the job of the GlobalProtect Portal?

To maintain the list of remote GlobalProtect Portals and list of categories for checking the client machine

To maintain the list of GlobalProtect Gateways and list of categories for checking the client machine

To load balance GlobalProtect client connections to GlobalProtect Gateways

None of the above

QUESTION 38
In PAN-OS 5.0, how is Wildfire enabled?

Via the URL-Filtering “Continue” Action

Wildfire is automatically enabled with a valid URL-Filtering license

A custom file blocking action must be enabled for all PDF and PE type files

Via the “Forward” and “Continue and Forward” File-Blocking actions

QUESTION 39
WildFire analyzes files to determine whether or not they are malicious. When doing so, WildFire will classify the file
with an official verdict. This verdict is known as the WildFire Analysis verdict. Choose the three correct classifications
as a result of this analysis and classification?

Benign

Adware

Spyware

Malware detection

Safeware

Grayware

QUESTION 40
What option should be configured when using User-ID

Enable User-ID per zone

Enable User-ID per interface

Enable User-ID per Security Policy

None of the above

QUESTION 41
A user complains that they are no longer able to access a needed work application after you have implemented
vulnerability and anti-spyware profiles. The user’s application uses a unique port. What is the most efficient way to
allow the user access to this application?

Utilize an Application Override Rule, referencing the custom port utilzed by this application. Application Override
rules bypass all Layer 7 inspection, thereby allowing access to this application.

In the Threat log, locate the event which is blocking access to the user’s application and create a IP-based
exemption for this user.

In the vulnerability and anti-spyware profiles, create an application exemption for the user’s application.

Create a custom Security rule for this user to access the required application. Do not apply vulnerability and anti-
spyware profiles to this rule.

QUESTION 42
Which interface type does NOT require any configuration changes to adjacent network devices?

Layer 2

Tap

Virtual Wire

Layer 3

ACE Study Guide Cover to Cover as Literally: https://www.testbraindump.com/ACE-exam-prep.html

[Q18-Q36] Certification Training for ACE Exam Dumps Test Engine [2023]

March 5, 2023March 5, 2023 ACE Aviatrix

Related Posts

Leave a Reply Cancel reply