Exam Details

  • Exam Code
    :ACE
  • Exam Name
    :Accredited Configuration Engineer (ACE) PAN-OS 8.0
  • Certification
    :ACE
  • Vendor
    :Palo Alto Networks
  • Total Questions
    :222 Q&As
  • Last Updated
    :May 05, 2025

Palo Alto Networks ACE ACE Questions & Answers

  • Question 131:

    In an Anti-Virus profile, changing the action to "Block" for IMAP or POP decoders will result in the following:

    A. The connection from the server will be reset

    B. The Anti-virus profile will behave as if "Alert" had been specified for the action

    C. The traffic will be dropped by the firewall

    D. Error 541 being sent back to the server

  • Question 132:

    What will the user experience when attempting to access a blocked hacking website through a translation service such as Google Translate or Bing Translator?

    A. A "Blocked" page response when the URL filtering policy to block is enforced.

    B. A "Success" page response when the site is successfully translated.

    C. The browser will be redirected to the original website address.

    D. An "HTTP Error 503 Service unavailable" message.

  • Question 133:

    Which option allows an administrator to segrate Panorama and Syslog traffic, so that the Management Interface is not employed when sending these types of traffic?

    A. Custom entries in the Virtual Router, pointing to the IP addresses of the Panorama and Syslog devices.

    B. Define a Loopback interface for the Panorama and Syslog Devices

    C. On the Device tab in the Web UI, create custom server profiles for Syslog and Panorama

    D. Service Route Configuration

  • Question 134:

    Which of the following can provide information to a Palo Alto Networks firewall for the purposes of User-ID? (Select all correct answers.)

    A. Network Access Control (NAC) device

    B. Domain Controller

    C. RIPv2

    D. SSL Certificates

  • Question 135:

    Palo Alto Networks firewalls support the use of both Dynamic (built-in user roles) and Role-Based (customized user roles)

    A. True

    B. False

  • Question 136:

    Previous toPAN-OS 8.0the firewall was able to decode up to two levels. WithPAN-OS 8.0the firewall can now decode up to how many levels?

    A. Three

    B. Six

    C. Five

    D. Four

  • Question 137:

    When configuring a Decryption Policy Rule, which of the following are available as matching criteria in the rule? (Choose 3 answers.)

    A. Source Zone

    B. URL Category

    C. Application

    D. Service

    E. Source User

  • Question 138:

    Which one of the options describes the sequence of the GlobalProtect agent connecting to a Gateway?

    A. The agent connects to the portal, obtains a list of the Gateways, and connects to the Gateway with the fastest SSL connect time

    B. The agent connects to the portal and randomly establishes connect to the first available Gateway

    C. The agent connects to the portal, obtains a list of the Gateways, and connects to the Gateway with the fastest PING response time

    D. The agent connects to the closest Gateway and sends the HIP report to the portal

  • Question 139:

    In order to route traffic between layer 3 interfaces on the PAN firewall you need:

    A. VLAN

    B. Vwire

    C. Security Profile

    D. Virtual Router

  • Question 140:

    Which of the following interfaces types will have a MAC address?

    A. Layer 3

    B. Tap

    C. Vwire

    D. Layer 2

Related Exams:

Tips on How to Prepare for the Exams

Nowadays, the certification exams become more and more important and required by more and more enterprises when applying for a job. But how to prepare for the exam effectively? How to prepare for the exam in a short time with less efforts? How to get a ideal result and how to find the most reliable resources? Here on Vcedump.com, you will find all the answers. Vcedump.com provide not only Palo Alto Networks exam questions, answers and explanations but also complete assistance on your exam preparation and certification application. If you are confused on your ACE exam preparations and Palo Alto Networks certification application, do not hesitate to visit our Vcedump.com to find your solutions here.