Palo Alto Networks Palo Alto Networks Certifications ACE Questions & Answers

• Question 51:

  What option should be configured when using User Identification?

  A. Enable User Identification per Zone

  B. Enable User Identification per Security Rule

  C. Enable User Identification per interface

  D. None of the above

  Correct Answer: A

• Question 52:

  After the installation of a new Application and Threat database, the firewall must be rebooted.

  A. True

  B. False

  Correct Answer: B

• Question 53:

  Traffic going to a public IP address is being translated by your PANW firewall to your web server's private IP. Which IP should the Security Policy use as the "Destination IP" in order to allow traffic to the server.

  A. The server's public IP

  B. The firewall's gateway IP

  C. The server's private IP

  D. The firewall's MGT IP

  Correct Answer: A

• Question 54:

  Which of the following is a routing protocol supported in a Palo Alto Networks firewall?

  A. RIPv2

  B. ISIS

  C. IGRP

  D. EIGRP

  Correct Answer: A

• Question 55:

  In PAN-OS8.0, rule numbers were introduced. Rule Numbers are:

  A. Dynamic numbers that refer to a security policy's order and are especially useful when filtering security policies by tags

  B. Numbers referring to when the security policy was created and do not have a bearing on the order of policy enforcement

  C. Static numbers that must be manually re-numbered whenever a new security policy is added

  Correct Answer: A

• Question 56:

  To create a custom signature object for an Application Override Policy, which of the following fields are mandatory?

  A. Category

  B. Regular Expressions

  C. Ports

  D. Characteristics

  Correct Answer: D

• Question 57:

  InPAN-OS 8.0which of the available choices serves as an alert warning by defining patterns of suspicious traffic and network anomalies that may indicate a host has been compromised?

  A. App-ID Signatures

  B. Correlation Objects

  C. Command and Control Signatures

  D. Correlation Events

  E. Custom Signatures

  Correct Answer: E

• Question 58:

  What needs to be done prior to committing a configuration in Panorama after making a change via the CLI or web interface on a device?

  A. No additional actions required

  B. Synchronize the configuration between the device and Panorama

  C. Make the same change again via Panorama

  D. Re-import the configuration from the device into Panorama

  Correct Answer: A

• Question 59:

  What option should be configured when using User-ID

  A. Enable User-ID per zone

  B. Enable User-ID per interface

  C. Enable User-ID per Security Policy

  D. None of the above

  Correct Answer: C

• Question 60:

  When using Config Audit, the color yellow indicates which of the following?

  A. A setting has been changed between the two config files

  B. A setting has been deleted from a config file.

  C. A setting has been added to a config file

  D. An invalid value has been used in a config file.

  Correct Answer: A