14/05/2017 RealizeYourPotential:paloaltonetworks

TestAccreditedConfigurationEngineer(ACE)ExamPANOS8.0Version

ACE8.0

Question1of40.

ASecuritypolicyruledisplayedinitalicfontindicateswhichcondition?

Therulehasbeenoverridden.
Theruleisaclone.
Theruleisdisabled.
Theruleisactive.

Markforfollowup

Question2of40.

AnAntivirusSecurityProfilespecifiesActionsandWildFireActions.WildfireActionsenableyoutoconfigurethefirewallto
performwhichoperation?

BlocktrafficwhenaWildFirevirussignatureisdetected.
DownloadnewantivirussignaturesfromWildFire.
UploadtraffictoWildFirewhenavirusissuspected.
Deletepacketdatawhenavirusissuspected.

Markforfollowup

Question3of40.

AnInterfaceManagementProfilecanbeattachedtowhichtwointerfacetypes?(Choosetwo.)
Loopback
VirtualWire
Layer2
Layer3
Tap

Markforfollowup

Question4of40.

AppIDrunningonafirewallidentifiesapplicationsusingwhichthreemethods?(Choosethree.)
Applicationsignatures
Knownprotocoldecoders
WildFirelookups
Programheuristics
PANDBlookups

Markforfollowup

Question5of40.

https://paloaltonetworks.csod.com/Evaluations/EvalLaunch.aspx?loid=6296516fbf5b4c19bb9a5223178f76d8&evalLvl=5&redirect_url=%2fphnx%2fdriver 1/9
14/05/2017 RealizeYourPotential:paloaltonetworks
Applicationblockpagescanbeenabledforwhichapplications?

any
MGTportbased
nonTCP/IP
webbased

Markforfollowup

Question6of40.

Becauseafirewallexamineseverypacketinasession,afirewallcandetectapplication________?

shifts
groups
filters
errors

Markforfollowup

Question7of40.

FindingURLsmatchedtothenotresolvedURLcategoryintheURLFilteringlogfilemightindicatethatyoushouldtake
whichaction?

Rebootthefirewall.
ValidateconnectivitytothePANDBcloud.
RedownloadtheURLseeddatabase.
ValidateyourSecuritypolicyrules.

Markforfollowup

Question8of40.

Forwhichfirewallfeatureshouldyoucreateforwardtrustandforwarduntrustcertificates?

SSHdecryption
SSLclientsidecertificatechecking
SSLInboundInspectiondecryption
SSLforwardproxydecryption

Markforfollowup

Question9of40.

IfaDNSsinkholeisconfigured,anysinkholeactionsindicatingapotentiallyinfectedhostarerecordedinwhichlogtype?

Traffic
WildFireSubmissions
DataFiltering
Threat

Markforfollowup

Question10of40.

https://paloaltonetworks.csod.com/Evaluations/EvalLaunch.aspx?loid=6296516fbf5b4c19bb9a5223178f76d8&evalLvl=5&redirect_url=%2fphnx%2fdriver 2/9
14/05/2017 RealizeYourPotential:paloaltonetworks
IfthereisanHAconfigurationmismatchbetweenfirewallsduringpeernegotiation,whichstatewillthepassivefirewall
enter?

INITIAL
NONFUNCTIONAL
PASSIVE
ACTIVE

Markforfollowup

Question11of40.

InadestinationNATconfiguration,whichoptionaccuratelycompletesthefollowingsentence?ASecuritypolicyruleshould
bewrittentomatchthe_______.

postNATsourceanddestinationaddresses,butthepreNATdestinationzone
originalpreNATsourceanddestinationaddresses,butthepostNATdestinationzone
originalpreNATsourceanddestinationaddresses,andthepreNATdestinationzone
postNATsourceanddestinationaddresses,andthepostNATdestinationzone

Markforfollowup

Question12of40.

InaSecurityProfile,whichactiondoesafirewalltakewhentheprofilesactionisconfiguredasResetServer?(Choose
two.)
Thetrafficresponderisreset.
Theclientisreset.
ForUDPsessions,theconnectionisreset.
ForUDPsessions,theconnectionisdropped.

Markforfollowup

Question13of40.

InanHAconfiguration,whichthreecomponentsaresynchronizedbetweenthepairoffirewalls?(Choosethree.)
logs
objects
policies
networks

Markforfollowup

Question14of40.

InanHAconfiguration,whichthreefunctionsareassociatedwiththeHA1ControlLink?(Choosethree.)
exchanginghellos
exchangingheartbeats
synchronizingsessions
synchronizingconfiguration

Markforfollowup

Question15of40.
https://paloaltonetworks.csod.com/Evaluations/EvalLaunch.aspx?loid=6296516fbf5b4c19bb9a5223178f76d8&evalLvl=5&redirect_url=%2fphnx%2fdriver 3/9
14/05/2017 RealizeYourPotential:paloaltonetworks

Onafirewallthathas32EthernetportsandisconfiguredwithadynamicIPandport(DIPP)NAToversubscriptionrateof
2x,whatisthemaximumnumberofconcurrentsessionssupportedbyeachavailableIPaddress?

32
64
64K
128K

Markforfollowup

Question16of40.

TheThreatlogrecordseventsfromwhichthreeSecurityProfiles?(Choosethree.)
VulnerabilityProtection
Antivirus
URLFiltering
WildFireAnalysis
FileBlocking
AntiSpyware

Markforfollowup

Question17of40.

TheUserIDfeatureisenabledper__________?

firewall
UserIDagent
firewallinterface
firewallsecurityzone

Markforfollowup

Question18of40.

TheWildFirePortalwebsitesupportswhichthreeoperations?(Choosethree.)
reportincorrectverdicts
uploadfilestoWildFireforanalysis
requestfirewallWildFirelicenses
viewWildFireverdicts

Markforfollowup

Question19of40.

WhatarethetwoseparateplanesthatmakeupthePANOSarchitecture?(Choosetwo.)
dataplane
routingplane
signatureprocessingplane
HAplane
control/managementplane

https://paloaltonetworks.csod.com/Evaluations/EvalLaunch.aspx?loid=6296516fbf5b4c19bb9a5223178f76d8&evalLvl=5&redirect_url=%2fphnx%2fdriver 4/9
14/05/2017 RealizeYourPotential:paloaltonetworks

Markforfollowup

Question20of40.

WhatarethreeconnectionmethodsfortheGlobalProtectagent?(Choosethree.)
PreLogon
Captchaportal
UserLogon
Ondemand

Markforfollowup

Question21of40.

WhataretwobenefitsofattachingaDecryptionProfiletoaDecryptionpolicynodecryptrule?(Choosetwo.)
URLcategorymatchchecking
untrustedcertificatechecking
acceptableprotocolchecking
expiredcertificatechecking

Markforfollowup

Question22of40.

WhatisacharacteristicofDynamicAdminRoles?

Theycanbedynamicallycreatedordeletedbyafirewalladministrator.
Roleprivilegescanbedynamicallyupdatedwithnewersoftwarereleases.
Roleprivilegescanbedynamicallyupdatedbyafirewalladministrator.
Theycanbedynamicallymodifiedbyexternalauthorizationsystems.

Markforfollowup

Question23of40.

WhatistheresultofperformingafirewallCommitoperation?

Thecandidateconfigurationbecomesthesavedconfiguration.
Thecandidateconfigurationbecomestherunningconfiguration.
Theloadedconfigurationbecomesthecandidateconfiguration.
Thesavedconfigurationbecomestheloadedconfiguration.

Markforfollowup

Question24of40.

WheredoesaGlobalProtectclientconnecttofirstwhentryingtoconnecttothenetwork?

ADagent
UserIDagent
GlobalProtectGateway
GlobalProtectPortal

Markforfollowup
https://paloaltonetworks.csod.com/Evaluations/EvalLaunch.aspx?loid=6296516fbf5b4c19bb9a5223178f76d8&evalLvl=5&redirect_url=%2fphnx%2fdriver 5/9
14/05/2017 RealizeYourPotential:paloaltonetworks

Question25of40.

WhichactioninaFileBlockingSecurityProfileresultsintheuserbeingpromptedtoverifyafiletransfer?

Block
Continue
Allow
Alert

Markforfollowup

Question26of40.

Whichconditionmustexistbeforeafirewall'sinbandinterfacecanprocesstraffic?

Thefirewallmustnotbealoopbackinterface.
Thefirewallmustbeassignedtoasecurityzone.
ThefirewallmustbeassignedanIPaddress.
Thefirewallmustbeenabled.

Markforfollowup

Question27of40.

WhichfeatureisadynamicgroupingofapplicationsusedinSecuritypolicyrules?

implicitapplications
dependentapplications
applicationgroup
applicationfilter

Markforfollowup

Question28of40.

WhichfouractionscanbeappliedtotrafficmatchingaURLFilteringSecurityProfile?(Choosefour.)
ResetClient
Override
Continue
ResetServer
Block
Alert

Markforfollowup

Question29of40.

WhichinterfacetypedoesNOTrequireanyconfigurationchangestoadjacentnetworkdevices?

Layer2
Tap
VirtualWire
Layer3

https://paloaltonetworks.csod.com/Evaluations/EvalLaunch.aspx?loid=6296516fbf5b4c19bb9a5223178f76d8&evalLvl=5&redirect_url=%2fphnx%2fdriver 6/9
14/05/2017 RealizeYourPotential:paloaltonetworks

Markforfollowup

Question30of40.

WhichinterfacetypeisNOTassignedtoasecurityzone?

VLAN
HA
VirtualWire
Layer3

Markforfollowup

Question31of40.

WhichstatementdescribesafunctionprovidedbyanInterfaceManagementProfile?

Itdetermineswhichexternalservicesareaccessiblebythefirewall.
Itdetermineswhichadministratorscanmanagewhichinterfaces.
Itdetermineswhichfirewallservicesareaccessiblefromexternaldevices.
ItdeterminestheNetFlowandLLDPinterfacemanagementsettings.

Markforfollowup

Question32of40.

WhichthreearevalidconfigurationoptionsinaWildFireAnalysisProfile?(Choosethree.)
filetypes
direction
maximumfilesize
application

Markforfollowup

Question33of40.

Whichthreeinterfacetypescancontrolorshapenetworktraffic?(Choosethree.)
Layer2
Tap
VirtualWire
Layer3

Markforfollowup

Question34of40.

WhichthreeMGTportconfigurationsettingsarerequiredinordertoaccesstheWebUI?(Choosethree.)
Hostname
Netmask
Defaultgateway
IPaddress

Markforfollowup

https://paloaltonetworks.csod.com/Evaluations/EvalLaunch.aspx?loid=6296516fbf5b4c19bb9a5223178f76d8&evalLvl=5&redirect_url=%2fphnx%2fdriver 7/9
14/05/2017 RealizeYourPotential:paloaltonetworks

Question35of40.

Whichthreenetworkmodesaresupportedbyactive/passiveHA?(Choosethree.)
Tap
Layer3
VirtualWire
Layer2

Markforfollowup

Question36of40.

Whichthreestatementsaretrueregardingsessionsonthefirewall?(Choosethree.)
Returntrafficisallowed.
Networkpacketsarealwaysmatchedtoasession.
SessionsarealwaysmatchedtoaSecuritypolicyrule.
Theonlysessioninformationtrackedinthesessionlogsarethefivetuples.

Markforfollowup

Question37of40.

WhichtwofiletypescanbesenttoWildFireforanalysisifafirewallhasonlyastandardsubscriptionservice?(Choose
two.)
.jar
.exe
.dll
.pdf

Markforfollowup

Question38of40.

WhichtwoUserIDmethodsareusedtoverifyknownIPaddresstousermappings?(Choosetwo.)
ClientProbing
ServerMonitoring
SessionMonitoring
CaptivePortal

Markforfollowup

Question39of40.

Whichusermappingmethodisrecommendedforahighlymobileuserbase?

GlobalProtect
ServerMonitoring
SessionMonitoring
ClientProbing

Markforfollowup

https://paloaltonetworks.csod.com/Evaluations/EvalLaunch.aspx?loid=6296516fbf5b4c19bb9a5223178f76d8&evalLvl=5&redirect_url=%2fphnx%2fdriver 8/9
14/05/2017 RealizeYourPotential:paloaltonetworks

Question40of40.

WhichUserIDusermappingmethodisrecommendedforenvironmentswhereusersfrequentlychangeIPaddresses?

ClientProbing
ServerMonitoring
SessionMonitoring
CaptivePortal

Markforfollowup

Save/ReturnLater Summary

https://paloaltonetworks.csod.com/Evaluations/EvalLaunch.aspx?loid=6296516fbf5b4c19bb9a5223178f76d8&evalLvl=5&redirect_url=%2fphnx%2fdriver 9/9