ACE Exam Questions

A Security policy rule displayed in italic font indicates which condition?

An Antivirus Security Profile specifies Actions and WildFire Actions. WildFire Actions enable you to configure the firewall to perform which operation?

An Interface Management Profile can be attached to which two interface types? (Choose two.)

AppID running on a firewall identifies applications using which three methods? (Choose three.)

Application block pages can be enabled for which applications?

Because a firewall examines every packet in a session, a firewall can detect application ________?

Finding URLs matched to the notresolved URL category in the URL Filtering log file might indicate that you should take which action?

For which firewall feature should you create forward trust and forward untrust certificates?

If a DNS sinkhole is configured, any sinkhole actions indicating a potentially infected host are recorded in which log type?

If there is an HA configuration mismatch between firewalls during peer negotiation, which state will the passive firewall enter?

In a destination NAT configuration, which option accurately completes the following sentence? A Security policy rule should be written to match the ____.

In a Security Profile, which action does a firewall take when the profiles action is configured as Reset Server? (Choose two.)

In an HA configuration, which three components are synchronized between the pair of firewalls? (Choose three.)

In an HA configuration, which three functions are associated with the HA1 Control Link? (Choose three.)

On a firewall that has 32 Ethernet ports and is configured with a dynamic IP and port (DIPP) NAT oversubscription rate of 2x, what is the maximum number of concurrent sessions supp...

The Threat log records events from which three Security Profiles? (Choose three.)

The UserID feature is enabled per ________?

The WildFire Portal website supports which three operations? (Choose three.)

What are the two separate planes that make up the PAN-OS architecture? (Choose two.)

What are two benefits of attaching a Decryption Profile to a Decryption policy nodecrypt rule? (Choose two.)

What is a characteristic of Dynamic Admin Roles?

What is the result of performing a firewall Commit operation?

Where does a GlobalProtect client connect to first when trying to connect to the network?

Which action in a File Blocking Security Profile results in the user being prompted to verify a file transfer?

Which condition must exist before a firewall's inbound interface can process traffic?

Which feature is a dynamic grouping of applications used in Security policy rules?

Which four actions can be applied to traffic matching a URL Filtering Security Profile? (Choose four.)

Which interface type does NOT require any configuration changes to adjacent network devices?

Which interface type is NOT assigned to a security zone?

Which statement describes a function provided by an Interface Management Profile?

Which three are valid configuration options in a WildFire Analysis Profile? (Choose three.)

Which three interface types can control or shape network traffic? (Choose three.)

Which three MGT port configuration settings are required in order to access the WebUl? (Choose three.)

Which three network modes are supported by active/passive HA? (Choose three.)

Which three statements are true regarding sessions on the firewall? (Choose three.)

Which two file types can be sent to WildFire for analysis if a firewall has only a standard subscription service? (Choose two.)

Which two User-ID methods are used to verify known IP addresstouser mappings? (Choose two.)

Which user mapping method is recommended for a highly mobile user base?

Which UserID user mapping method is recommended for environments where users frequently change IP addresses?

In an HA configuration, which two failure detection methods rely on ICMP ping? (Choose two.)

Which two user mapping methods are supported by the User-ID integrated agent? (Choose two.)

SSL Inbound Inspection requires that the firewall be configured with which two components? (Choose two.)

When SSL traffic passes through the firewall, which component is evaluated first?

Which statement describes the Export named configuration snapshot operation?

Which statement is true about a URL Filtering Profile continue password?

Which three components can be sent to WildFire for analysis? (Choose three.)

Which type of content update does NOT have to be scheduled for download on the firewall?

The firewall acts as a proxy for which two types of traffic? (Choose two.)

What is a use case for deploying Palo Alto Networks NGFW in the public cloud?

In a Destination NAT configuration, the Translated Address field may be populated with either an IP address or an Address Object.