1. Home
  2. Palo Alto Networks
  3. ACE

Accredited Configuration Engineer (ACE) PAN-OS 8.0

Exam Details

  • Exam Code
    :ACE
  • Exam Name
    :Accredited Configuration Engineer (ACE) PAN-OS 8.0
  • Certification
    :ACE
  • Vendor
    :Palo Alto Networks
  • Total Questions
    :222 Q&As
  • Last Updated
    :May 05, 2025

Palo Alto Networks ACE ACE Questions & Answers

  • Question 161:

    What is the default setting for 'Action' in a Decryption Policy's rule?

    A. No-decrypt

    B. Decrypt

    C. Any

    D. None

  • Question 162:

    Users can be authenticated serially to multiple authentication servers by configuring:

    A. Multiple RADIUS Servers sharing a VSA configuration

    B. Authentication Sequence

    C. Authentication Profile

    D. A custom Administrator Profile

  • Question 163:

    Which of the following most accurately describes Dynamic IP in a Source NAT configuration?

    A. The next available address in the configured pool is used, and the source port number is changed.

    B. A single IP address is used, and the source port number is unchanged.

    C. A single IP address is used, and the source port number is changed.

    D. The next available IP address in the configured pool is used, but the source port number is unchanged.

  • Question 164:

    Which of the following must be configured when deploying User-ID to obtain information from an 802.1x authenticator?

    A. Terminal Server Agent

    B. An Agentless deployment of User-ID, employing only the Palo Alto Networks Firewall

    C. A User-ID agent, with the "Use for NTLM Authentication" option enabled.

    D. XML API for User-ID Agent

  • Question 165:

    Besides selecting the Heartbeat Backup option when creating an ActivePassive HA Pair, which of the following also prevents "SplitBrain"?

    A. Creating a custom interface under Service Route Configuration, and assigning this interface as the backup HA2 link.

    B. Under "Packet Forwarding", selecting the VR Sync checkbox.

    C. Configuring an independent backup HA1 link.

    D. Configuring a backup HA2 link that points to the MGT interface of the other device in the pair.

  • Question 166:

    Which local interface cannot be assigned to the IKE gateway?

    A. Tunnel

    B. L3

    C. VLAN

    D. Loopback

  • Question 167:

    Which of the Dynamic Updates listed below are issued on a daily basis? (Select all correct answers.)

    A. Applications

    B. BrightCloud URL Filtering

    C. Applications and Threats

    D. Antivirus

  • Question 168:

    Can multiple administrator accounts be configured on a single firewall?

    A. Yes

    B. No

  • Question 169:

    Which of the following can provide information to a Palo Alto Networks firewall for the purposes of UserID? (Select all correct answers.)

    A. Domain Controller

    B. SSL Certificates

    C. RIPv2

    D. Network Access Control (NAC) device

  • Question 170:

    Configuring a pair of devices into an Active/Active HA pair provides support for:

    A. Higher session count

    B. Redundant Virtual Routers

    C. Asymmetric routing environments

    D. Lower fail-over times

Related Exams:

Tips on How to Prepare for the Exams

Nowadays, the certification exams become more and more important and required by more and more enterprises when applying for a job. But how to prepare for the exam effectively? How to prepare for the exam in a short time with less efforts? How to get a ideal result and how to find the most reliable resources? Here on Vcedump.com, you will find all the answers. Vcedump.com provide not only Palo Alto Networks exam questions, answers and explanations but also complete assistance on your exam preparation and certification application. If you are confused on your ACE exam preparations and Palo Alto Networks certification application, do not hesitate to visit our Vcedump.com to find your solutions here.