Palo Alto Networks ACE ACE Questions & Answers

• Question 1:

  Which mode will allow a user to choose how they wish to connect to the GlobalProtect Network as they would like?

  A. Single Sign-On Mode

  B. On Demand Mode

  C. Always On Mode

  D. Optional Mode

  Correct Answer: B

• Question 2:

  Wildfire may be used for identifying which of the following types of traffic?

  A. Malware

  B. DNS

  C. DHCP

  D. URL Content

  Correct Answer: A

• Question 3:

  Which fields can be altered in the default Vulnerability profile?

  A. Severity

  B. Category

  C. CVE

  D. None

  Correct Answer: D

• Question 4:

  Which statement accurately reflects the functionality of using regions as objects in Security policies?

  A. Predefined regions are provided for countries, not but not for cities. The administrator can set up custom regions, including latitude and longitude, to specify the geographic position of that particular region.

  B. The administrator can set up custom regions, including latitude and longitude, to specify the geographic position of that particular region. These custom regions can be used in the "Source User" field of the Security Policies.

  C. Regions cannot be used in the "Source User" field of the Security Policies, unless the administrator has set up custom regions.

  D. The administrator can set up custom regions, including latitude and longitude, to specify the geographic position of that particular region. Both predefined regions and custom regions can be used in the "Source User" field.

  Correct Answer: A

• Question 5:

  Which fields can be altered in the default Vulnerability Protection Profile?

  A. Category

  B. Severity

  C. None

  Correct Answer: C

• Question 6:

  Which best describes how Palo Alto Networks firewall rules are applied to a session?

  A. last match applied

  B. first match applied

  C. all matches applied

  D. most specific match applied

  Correct Answer: B

• Question 7:

  What are two sources of information for determining whether the firewall has been successful in communicating with an external UserID Agent?

  A. System Logs and the indicator light under the UserID Agent settings in the firewall.

  B. Traffic Logs and Authentication Logs.

  C. System Logs and an indicator light on the chassis.

  D. System Logs and Authentication Logs.

  Correct Answer: A

• Question 8:

  Without a WildFire subscription, which of the following files can be submitted by the Firewall to the hosted WildFire virtualized sandbox?

  A. PE files only

  B. PDF files only

  C. MS Office doc/docx, xls/xlsx, and ppt/pptx files only

  D. PE and Java Applet (jar and class) only

  Correct Answer: C

• Question 9:

  What are the benefits gained when the "Enable Passive DNS Monitoring" checkbox is chosen on the firewall? (Select all correct answers.)

  A. Improved DNSbased CandC signatures.

  B. Improved PANDB malware detection.

  C. Improved BrightCloud malware detection.

  D. Improved malware detection in WildFire.

  Correct Answer: ABD

• Question 10:

  You have decided to implement a Virtual Wire Subinterface. Which options can be used to classify traffic?

  A. Either VLAN tag or IP address, provided that each tag or ID is contained in the same zone.

  B. Subinterface ID and VLAN tag only

  C. By Zone and/or IP Classifier

  D. VLAN tag, or VLAN tag plus IP address (IP address, IP range, or subnet).

  Correct Answer: D