[Q18-Q36] Certification Training for ACE Exam Dumps Test Engine [2023]

4/5 - (1 vote)

Certification Training for ACE Exam Dumps Test Engine [2023]

Mar 05, 2023 Step by Step Guide to Prepare for ACE Exam

NO.18 Which two file types can be sent to WildFire for analysis if a firewall has only a standard subscription service? (Choosetwo.)

.jar

.exe

.dll

.pdf

NO.19 What is the maximum file size of .EXE files uploaded from the firewall to WildFire?

Always 2 megabytes.

Always 10 megabytes.

Configurable up to 2 megabytes.

Configurable up to 10 megabytes.

NO.20 Operations team has noticed that during the peak working hours, Aviatrix Gateway’s throughput utilization stays around 80% of the current instance size. A decision has been made to scale up the instance size to provide more throughput. Which below statement accurately describes instance sizing of Aviatrix Gateways?

Aviatrix Gateways can scale down but not scale up

Aviatrix Gateways instance size has to be chosen at deployment and can’t change later

Aviatrix Gateways can scale up but not scale down

Aviatrix Gateways can scale up and down both

NO.21 How do you limit the amount of information recorded in the URL Content Filtering Logs?

Enable DSRI

Disable URL packet captures

Enable URL log caching

Enable Log container page only

NO.22 As a Palo Alto Networks firewall administrator, you have made unwanted changes to the Candidate configuration. These changes may be undone by Device > Setup > Operations > Configuration Management>…. and then what operation?

Revert to Running Configuration

Revert to last Saved Configuration

Load Configuration Version

Import Named Configuration Snapshot

NO.23 When setting up GlobalProtect, what is the job of the GlobalProtect Portal? Select the best answer

To maintain the list of remote GlobalProtect Portals and list of categories for checking the client machine

To maintain the list of GlobalProtect Gateways and list of categories for checking the client machine

To load balance GlobalProtect client connections to GlobalProtect Gateways

None of the above

NO.24 When creating a Security Policy to allow Facebook in PAN-OS 5.0, how can you be sure that no other web-browsing traffic is permitted?

Ensure that the Service column is defined as “application-default” for this security rule.
This will automatically include the implicit web-browsing application dependency.

Create a subsequent rule which blocks all other traffic

When creating the rule, ensure that web-browsing is added to the same rule. Both applications will be processed by the Security policy, allowing only Facebook to be accessed. Any other applications can be permitted in subsequent rules.

No other configuration is required on the part of the administrator, since implicit application dependencies will be added automaticaly.

NO.25 What are the benefits gained when the “Enable Passive DNS Monitoring” checkbox is chosen on the firewall? (Select
all correct answers.)

Improved DNSbased C&C signatures.

Improved PANDB malware detection.

Improved BrightCloud malware detection.

Improved malware detection in WildFire.

NO.26 The “Drive-By Download” protection feature, under File Blocking profiles in Content-ID, provides:

Password-protected access to specific file downloads, for authorized users increased speed on the downloads of the allowed file types

Protection against unwanted downloads, by alerting the user with a response page indicating that file is going to be downloaded

The Administrator the ability to leverage Authentication Profiles in order to protect against unwanted downloads

NO.27 As per the cloud architecture best practices guidelines in Multi-Cloud Network Architecture (MCNA), which component provides a consistent transit available in all regions across all public cloud providers.

Cloud Operations Layer

Global Transit Layer

Cloud Applications Layer

Cloud Security Layer

NO.28 When setting up GlobalProtect, what is the job of the GlobalProtect Portal? Select the best answer

To maintain the list of remote GlobalProtect Portals and list of categories for checking the client machine

To maintain the list of GlobalProtect Gateways and list of categories for checking the client machine

To load balance GlobalProtect client connections to GlobalProtect Gateways

None of the above

NO.29 When using Config Audit, the color yellow indicates which of the following?

A setting has been changed between the two config files

A setting has been deleted from a config file.

A setting has been added to a config file

An invalid value has been used in a config file.

NO.30 When configuring Security rules based on FQDN objects, which of the following statements are true?

The firewall resolves the FQDN first when the policy is committed, and is refreshed each time Security rules are evaluated.

The firewall resolves the FQDN first when the policy is committed, and is refreshed at TTL expiration. There is no limit on the number of IP addresses stored for each resolved FQDN.

In order to create FQDN-based objects, you need to manually define a list of associated IP. Up to 10 IP addresses can be configured for each FQDN entry.

The firewall resolves the FQDN first when the policy is committed, and is refreshed at TTL expiration. The resolution of this FQDN stores up to 10 different IP addresses.

NO.31 Which of the following interfaces types will have a MAC address?

Layer 3

Tap

Vwire

Layer 2

NO.32 In which of the following can UserID be used to provide a match condition?

Security Policies

NAT Policies

Zone Protection Policies

Threat Profiles

NO.33 “What is the result of an Administrator submitting a WildFire report’s verdict back to Palo Alto Networks as
“Incorrect”?

The signature will be updated for False positive and False negative files in the next AV signature update.

The signature will be updated for False positive and False negative files in the next Application signature update.

You will receive an email to disable the signature manually.

You will receive an update within 15 minutes.

NO.34 In a Palo Alto Networks firewall, every interface in use must be assigned to a zone in order to process traffic.

True

False

NO.35 How do you reduce the amount of information recorded in the URL Content Filtering Logs?

Enable “Log container page only”.

Disable URL packet captures.

Enable URL log caching.

Enable DSRI.

NO.36 Which statement accurately reflects the functionality of using regions as objects in Security policies?

Predefined regions are provided for countries, not but not for cities. The administrator can set up custom regions,
including latitude and longitude, to specify the geographic position of that particular region.

The administrator can set up custom regions, including latitude and longitude, to specify the geographic position of
that particular region. These custom regions can be used in the “Source User” field of the Security Policies.

Regions cannot be used in the “Source User” field of the Security Policies, unless the administrator has set up
custom regions.

The administrator can set up custom regions, including latitude and longitude, to specify the geographic position of
that particular region. Both predefined regions and custom regions can be used in the “Source User” field.

Loading …

Introduction to Aviatrix Certified Engineer (ACE) Exam

The first multi-cloud networking and security credential open to technical professionals and cloud professionals is the Aviatrix Certified Engineer (ACE) program. The ACE certification is intended for individuals who already understand basic networking principles and train engineers and operational personnel in AWS, Azure, Google Cloud, and Oracle Cloud Infrastructure with working knowledge of native networking constructs and skills to develop use cases and multi-cloud architectures using Aviatrix software.

The ACE curriculum offers ongoing education that enables developers, engineers, and technical staff to develop advanced competency in native cloud capabilities and provides a structure for applying this expertise to network architecture and design trends in order to meet customer requirements.

Ultimate Guide to Prepare ACE Certification Exam for Aviatrix Certification: https://www.testbraindump.com/ACE-exam-prep.html

[Aug 24, 2023] Get Up-To-Date Real Exam Questions for ACE with New Materials [Q18-Q42]

August 24, 2023August 24, 2023 ACE Aviatrix

Introduction to Aviatrix Certified Engineer (ACE) Exam

Related Posts

Leave a Reply Cancel reply