Palo Alto Networks ACE ACE Questions & Answers

• Question 201:

  

  Taking into account only the information in the screenshot above, answer the following question:

  A span port or a switch is connected to e1/4, but there are no traffic logs. Which of the following conditions most likely explains this behavior?

  A. The interface is not assigned a virtual router.

  B. The interface is not assigned an IP address.

  C. The interface is not up.

  D. There is no zone assigned to the interface.

  Correct Answer: D

• Question 202:

  Which type of license is required to perform Decryption Port Mirroring?

  A. A free PANPADecrypt license

  B. A subscriptionbased

  C. SSL Port license

  D. A Client Decryption license

  E. A subscriptionbased PANPADecrypt license

  Correct Answer: A

• Question 203:

  What built-in administrator role allows all rights except for the creation of administrative accounts and virtual systems?

  A. superuser

  B. vsysadmin

  C. A custom role is required for this level of access

  D. deviceadmin

  Correct Answer: D

• Question 204:

  WildFire analyzes files to determine whether or not they are malicious. When doing so, WildFire will classify the file with an official verdict. This verdict is known as the WildFire Analysis verdict. Choose the three correct classifications as a result of this analysis and classification?

  A. Benign

  B. Adware

  C. Spyware

  D. Malware detection

  E. Safeware

  F. Grayware

  Correct Answer: ADF

• Question 205:

  How do you limit the amount of information recorded in the URL Content Filtering Logs?

  A. Enable DSRI

  B. Disable URL packet captures

  C. Enable URL log caching

  D. Enable Log container page only

  Correct Answer: D

• Question 206:

  Select the implicit rules enforced on traffic failing to match any user defined Security Policies:

  A. Intra-zone traffic is denied

  B. Inter-zone traffic is denied

  C. Intra-zone traffic is allowed

  D. Inter-zone traffic is allowed

  Correct Answer: BC

• Question 207:

  When employing the Brightcloud URL filtering database on the Palo Alto Networks firewalls, the order of checking within a profile is:

  A. Block List, Allow List, Custom Categories, Cache Files, Predefined Categories, Dynamic URL Filtering

  B. Block List, Allow List, Cache Files, Custom Categories, Predefined Categories, Dynamic URL Filtering

  C. Dynamic URL Filtering, Block List, Allow List, Cache Files, Custom Categories, Predefined Categories

  D. None of the above

  Correct Answer: A

• Question 208:

  Which of the following CANNOT use the source user as a match criterion?

  A. Policy Based Forwarding

  B. Secuirty Policies

  C. QoS

  D. DoS Protection

  E. Antivirus Profile

  Correct Answer: E

• Question 209:

  Select the implicit rules that are applied to traffic that fails to match any administratordefined Security Policies. (Choose all rules that are correct.)

  A. Intrazone traffic is allowed

  B. Interzone traffic is denied

  C. Intrazone traffic is denied

  D. Interzone traffic is allowed

  Correct Answer: AB

• Question 210:

  Which of the following represents HTTP traffic events that can be used to identify potential Botnets?

  A. Traffic from users that browse to IP addresses instead of fully-qualified domain names, downloading W32.Welchia.Worm from a Windows share, traffic to domains that have been registered in the last 30 days, downloading executable files from unknown URL's

  B. Traffic from users that browse to IP addresses instead of fully-qualified domain names, traffic to domains that have been registered in the last 60 days, downloading executable files from unknown URL's

  C. Traffic from users that browse to IP addresses instead of fully-qualified domain names, traffic to domains that have been registered in the last 60 days, downloading executable files from unknown URL's, IRC-based Command and Control traffic

  D. Traffic from users that browse to IP addresses instead of fully-qualified domain names, traffic to domains that have been registered in the last 30 days.

  Correct Answer: D