ACE Online Practice Questions and Answers

When employing the Brightcloud URL filtering database on the Palo Alto Networks firewalls, the order of checking within a profile is:

A. Block List, Allow List, Custom Categories, Cache Files, Predefined Categories, Dynamic URL Filtering

B. Block List, Allow List, Cache Files, Custom Categories, Predefined Categories, Dynamic URL Filtering

C. Dynamic URL Filtering, Block List, Allow List, Cache Files, Custom Categories, Predefined Categories

D. None of the above

Which of the following are accurate statements describing the HA3 link in an Active-Active HA deployment?

A. HA3 is used for session synchronization

B. The HA3 link is used to transfer Layer 7 information

C. HA3 is used to handle asymmetric routing

D. HA3 is the control link

A local/enterprise PKI system is required to deploy outbound forward proxy SSL decryption capabilities.

A. True

B. False

Which of the following Global Protect features requires a separate license?

A. Use of dynamic selection between multiple Gateways

B. Use of a Portal to allow users to connect

C. Allowing users to connect

D. Manual Gateway Selection

Where does a GlobalProtect client connect to first when trying to connect to the network?

A. AD agent

B. User-ID agent

C. GlobalProtect Gateway

D. GlobalProtect Portal

Which three are valid configuration options in a WildFire Analysis Profile? (Choose three.)

A. file types

B. direction

C. maximum file size

D. application

When using Config Audit, the color yellow indicates which of the following?

A. A setting has been changed between the two config files

B. A setting has been deleted from a config file.

C. A setting has been added to a config file

D. An invalid value has been used in a config file.

Using the API in PAN-OS 6.1, WildFire subscribers can upload up to how many samples per day?

A. 500

B. 50

C. 1000

D. 10

After configuring Captive Portal in Layer 3 mode, users in the Trust Zone are not receiving the Captive Portal authentication page when they launch their web browsers. How can this be corrected?

A. Ensure that all users in the Trust Zone are using NTLM-capable browsers

B. Enable "Response Pages" in the Interface Management Profile that is applied to the L3 Interface in the Trust Zone.

C. Confirm that Captive Portal Timeout value is not set below 2 seconds

D. Enable "Redirect " as the Mode type in the Captive Portal Settings

Which statement accurately reflects the functionality of using regions as objects in Security policies?

A. Predefined regions are provided for countries, not but not for cities. The administrator can set up custom regions, including latitude and longitude, to specify the geographic position of that particular region.

B. The administrator can set up custom regions, including latitude and longitude, to specify the geographic position of that particular region. These custom regions can be used in the "Source User" field of the Security Policies.

C. Regions cannot be used in the "Source User" field of the Security Policies, unless the administrator has set up custom regions.

D. The administrator can set up custom regions, including latitude and longitude, to specify the geographic position of that particular region. Both predefined regions and custom regions can be used in the "Source User" field.