ACE

ACE practice questions, page 3 of 7, with answer review and explanations.

Question 11

When configuring UserID on a Palo Alto Networks firewall, what is the proper procedure to limit User mappings to a particular DHCP scope?

  1. In the zone in which User Identification is enabled, create a User Identification ACL Include List using the same IP ranges as those allocated in the DHCP scope.
  2. Under the User Identification settings, under the User Mapping tab, select the "Restrict Users to Allocated IP" checkbox.
  3. In the zone in which User Identification is enabled, select the "Restrict Allocated IP" checkbox.
  4. In the DHCP settings on the Palo Alto Networks firewall, point the DHCP Relay to the IP address of the UserID agent.

Question 12

A Config Lock may be removed by which of the following users?

  1. The administrator who set it
  2. Device administrators
  3. Any administrator
  4. Superusers

Question 13

After the installation of a new version of PANOS, the firewall must be rebooted.

  1. True
  2. False

Question 14

When configuring a Decryption Policy Rule, which of the following are available as matching criteria in the rule? (Choose three.)

  1. Source Zone
  2. URL Category
  3. Application
  4. Service
  5. Source User

Question 15

After the installation of the Threat Prevention license, the firewall must be rebooted.

  1. True
  2. False