ACE

Review 172 ACE practice questions with answer explanations and community insights.

Question 1

In a Destination NAT configuration, the Translated Address field may be populated with either an IP address or an Address Object.

  1. True
  2. False

Question 2

Color-coded tags can be used on all of the items listed below EXCEPT:

  1. Address Objects
  2. Zones
  3. Service Groups
  4. Vulnerability Profiles

Question 3

Which of the following can provide information to a Palo Alto Networks firewall for the purposes of UserID?

  1. Domain Controller
  2. SSL Certificates
  3. RIPv2
  4. Network Access Control (NAC) device

Question 4

When you have created a Security Policy Rule that allows Facebook, what must you do to block all other web browsing traffic?

  1. Create an additional rule that blocks all other traffic.
  2. When creating the policy, ensure that webbrowsing is included in the same rule.
  3. Ensure that the Service column is defined as "applicationdefault" for this Security policy. Doing this will automatically include the implicit webbrowsing application dependency.
  4. Nothing. You can depend on PANOS to block the webbrowsing traffic that is not needed for Facebook use.

Question 5

As the Palo Alto Networks Administrator responsible for UserID, you need to enable mapping of network users that do not sign in using LDAP. Which information source would allow for reliable UserID mapping while requiring the least effort to configure?

  1. Active Directory Security Logs
  2. WMI Query
  3. Captive Portal
  4. Exchange CAS Security logs
We are moving to a new platform

CertificationTest is being migrated. Some pages may be slow or briefly unavailable; everything will be back to normal within a few hours. If you run into any issue, email support@certificationtest.net.