Palo_Alto_Networks
ACE · Question #123
ACE Question #123: Real Exam Question with Answer & Explanation
Sign in or unlock ACE to reveal the answer and full explanation for question #123. The question stem and answer options stay visible for context.
Question
When configuring Security rules based on FQDN objects, which of the following statements are true?
Options
- AThe firewall resolves the FQDN first when the policy is committed, and is refreshed each time Security rules are evaluated.
- BThe firewall resolves the FQDN first when the policy is committed, and is refreshed at TTL expiration. There is no limit on the number of IP addresses stored for each resolved FQDN.
- CIn order to create FQDN-based objects, you need to manually define a list of associated IP. Up to 10 IP addresses can be configured for each FQDN entry.
- DThe firewall resolves the FQDN first when the policy is committed, and is refreshed at TTL expiration. The resolution of this FQDN stores up to 10 different IP addresses.
Unlock ACE to see the answer
You've previewed enough free ACE questions. Unlock ACE for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.