Get Sep-2023 updated ACE Certification Exam Sample Questions
ACE Study Guide Cover to Cover as Literally
NEW QUESTION # 37
In an HA configuration, which three functions are associated with the HA1 Control Link?
(Choose three.)
- A. exchanging heartbeats
- B. synchronizing configuration
- C. exchanging hellos
- D. synchronizing sessions
Answer: A,B,C
NEW QUESTION # 38
What happens at the point of Threat Prevention license expiration?
- A. Threat Prevention no longer used; applicable traffic is blocked
- B. Threat Prevention is no longer used; applicable traffic is allowed
- C. Threat Prevention no longer used; traffic is allowed or blocked by configuration per Security Rule
- D. Threat Prevention no longer updated; existing database still effective
Answer: D
NEW QUESTION # 39
What is Aviatrix CoPilot?
- A. A tool inside Aviatrix Controller to run RightPath and other troubleshooting aspects
- B. A product that run analytics and machine learning against the architecture
- C. A component of Aviatrix platform that provides end to end visibility showing deployment overview, cloud topology and provides views based on Netflow data
- D. A tool that is used to upgrade Aviatrix Controller and perform other maintenance tasks
Answer: C
Explanation:
Aviatrix CoPilot provides a global operational view of your multi-cloud network. Enterprise IT teams use CoPilot's dynamic topology mapping to maintain an accurate topology of their global multi-cloud networks, FlowIQ to analyze global network traffic flows and global heat maps and time series trend charts to easily pinpoint and troubleshoot traffic anomalies. CoPilot leverages the intelligence and advanced network and security services delivered by Aviatrix's multi-cloud network platform to provide enterprise cloud network operations teams both familiar day-two operational features such as packet capture, trace route and ping and new operational capabilities specifically built for multi-cloud network environments.
NEW QUESTION # 40
After the installation of the Threat Prevention license, the firewall must be rebooted.
- A. False
- B. True
Answer: A
NEW QUESTION # 41
The "Drive-By Download" protection feature, under File Blocking profiles in Content-ID, provides:
- A. The Administrator the ability to leverage Authentication Profiles in order to protect against unwanted downloads
- B. Protection against unwanted downloads, by alerting the user with a response page indicating that file is going to be downloaded
- C. Password-protected access to specific file downloads, for authorized users increased speed on the downloads of the allowed file types
Answer: A
NEW QUESTION # 42
Match the issues of deploying firewalls in public cloud to appropriate problem statement.
Answer:
Explanation:
NEW QUESTION # 43
What will the user experience when browsing a Blocked hacking website such as www.2600.com via Google
Translator?
- A. It will be translated successfully
- B. User will get "HTTP Error 503 - Service unavailable" message
- C. It will be redirected to www.2600.com
- D. The URL filtering policy to Block is enforced
Answer: D
NEW QUESTION # 44
When troubleshooting Phase 1 of an IPSec VPN tunnel, what location will have the most informative logs?
- A. Responding side, Traffic Logs
- B. Initiating side, System Logs
- C. Responding side, System Logs
- D. Initiating side, Traffic Logs
Answer: C
NEW QUESTION # 45
In PAN-OS 7.0 which of the available choices serves as an alert warning by defining patterns of suspicious traffic and
network anomalies that may indicate a host has been compromised?
- A. Custom Signatures
- B. Correlation Objects
- C. App-ID Signatures
- D. Command & Control Signatures
- E. Correlation Events
Answer: A
NEW QUESTION # 46 
Taking into account only the information in the screenshot above, answer the following question. An administrator is pinging 4.4.4.4 and fails to receive a response. What is the most likely reason for the lack of response?
- A. The interface is down.
- B. There is a Security Policy that prevents ping.
- C. There is no route back to the machine originating the ping.
- D. There is no Management Profile.
Answer: D
NEW QUESTION # 47
Which AWS feature does Aviatrix integrate with to provide Public Subnet Filtering for Ingress Internet Traffic to a VPC?
- A. AWS Shield
- B. AWS GuardDuty
- C. AWS inspector
- D. AWS WAF
Answer: B
NEW QUESTION # 48
Can the Aviatrix platform help you interconnect VPCs/VNets/VCNs with overlapping IP address ranges?
- A. Yes, using S2C (Site-to-Cloud)
- B. Yes, using standard encrypted peering
- C. Yes, using FiightPath
- D. No
Answer: A
NEW QUESTION # 49
Traffic going to a public IP address is being translated by a Palo Alto Networks firewall to an internal server's private IP address. Which IP address should the Security Policy use as the "Destination IP" in order to allow traffic to the server?
- A. The firewall's gateway IP
- B. The firewall's MGT IP
- C. The server's public IP
- D. The server's private IP
Answer: C
NEW QUESTION # 50
In PANOS 6.0 and later, which of these items may be used as match criterion in a PolicyBased
Forwarding Rule? (Choose 3.)
- A. Application
- B. Destination Zone
- C. Source User
- D. Source Zone
Answer: A,C,D
NEW QUESTION # 51
Without a WildFire subscription, which of the following files can be submitted by the Firewall to the hosted WildFire virtualized sandbox?
- A. PDF files only
- B. MS Office doc/docx, xls/xlsx, and ppt/pptx files only
- C. PE and Java Applet (jar and class) only
- D. PE files only
Answer: B
NEW QUESTION # 52
What Security Profile type must be configured to send files to the WildFire cloud, and with what choices for the action setting?
- A. A Vulnerability Protection profile with the possible action of "Forward".
- B. A Data Filtering profile with possible actions of "Forward" or "Continue and Forward".
- C. A URL Filtering profile with the possible action of "Forward".
- D. A File Blocking profile with possible actions of "Forward" or "Continue and Forward".
Answer: D
NEW QUESTION # 53
Which of the following fields is not available in DoS policy?
- A. Application
- B. Destination Zone
- C. Service
- D. Source Zone
Answer: A
NEW QUESTION # 54
Subsequent to the installation of new licenses, the firewall must be rebooted
- A. False
- B. True
Answer: A
NEW QUESTION # 55
......
100% Real & Accurate ACE Questions and Answers with Free and Fast Updates: https://officialdumps.realvalidexam.com/ACE-real-exam-dumps.html
