Palo Alto Networks ACE ACE Questions & Answers

• Question 21:

  What happens at the point of Threat Prevention license expiration?

  A. Threat Prevention no longer updated; existing database still effective

  B. Threat Prevention is no longer used; applicable traffic is allowed

  C. Threat Prevention no longer used; applicable traffic is blocked

  D. Threat Prevention no longer used; traffic is allowed or blocked by configuration per Security Rule

  Correct Answer: A

• Question 22:

  In a Palo Alto Networks firewall, every interface in use must be assigned to a zone in order to process traffic.

  A. True

  B. False

  Correct Answer: A

• Question 23:

  Administrative Alarms can be enabled for which of the following except?

  A. Certificate Expirations

  B. Security Violation Thresholds

  C. Security Policy Tags

  D. Traffic Log capacity

  Correct Answer: A

• Question 24:

  When a user logs in via Captive Portal, their user information can be checked against:

  A. Terminal Server Agent

  B. Security Logs

  C. XML API

  D. Radius

  Correct Answer: D

• Question 25:

  When using remote authentication for users (LDAP, RADIUS, Active Directory, etc.), what must be done to allow a user to authenticate through multiple methods?

  A. Create an Authentication Sequence, dictating the order of authentication profiles.

  B. Create multiple authentication profiles for the same user.

  C. This cannot be done. A single user can only use one authentication type.

  D. This cannot be done. Although multiple authentication methods exist, a firewall must choose a single, global authentication type and all users must use this method.

  Correct Answer: A

• Question 26:

  What is the maximum file size of .EXE files uploaded from the firewall to WildFire?

  A. Always 2 megabytes.

  B. Always 10 megabytes.

  C. Configurable up to 2 megabytes.

  D. Configurable up to 10 megabytes.

  Correct Answer: D

• Question 27:

  Which of the following describes the sequence of the Global Protect agent connecting to a Gateway?

  A. The Agent connects to the Portal obtains a list of Gateways, and connects to the Gateway with the fastest SSL response time

  B. The agent connects to the closest Gateway and sends the HIP report to the portal

  C. The agent connects to the portal, obtains a list of gateways, and connects to the gateway with the fastest PING response time

  D. The agent connects to the portal and randomly establishes a connection to the first available gateway

  Correct Answer: A

• Question 28:

  

  Taking into account only the information in the screenshot above, answer the following question. An administrator is using SSH on port 3333 and BitTorrent on port 7777. Which statements are true?

  A. The BitTorrent traffic will be allowed.

  B. The SSH traffic will be allowed.

  C. The SSH traffic will be denied.

  D. The BitTorrent traffic will be denied.

  Correct Answer: BD

• Question 29:

  Which statement below is True?

  A. PANOS uses BrightCloud as its default URL Filtering database, but also supports PANDB.

  B. PANOS uses PANDB for URL Filtering, replacing BrightCloud.

  C. PANOS uses BrightCloud for URL Filtering, replacing PANDB.

  D. PANOS uses PANDB as the default URL Filtering database, but also supports BrightCloud.

  Correct Answer: D

• Question 30:

  You can assign an IP address to an interface in Virtual Wire mode.

  A. True

  B. False

  Correct Answer: B