ACE

ACE practice questions, page 5 of 7, with answer review and explanations.

Question 21

An enterprise PKI system is required to deploy SSL Forward Proxy decryption capabilities.

  1. True
  2. False

Question 22

UserID is enabled in the configuration of:

  1. a Security Profile.
  2. an Interface.
  3. a Security Policy.
  4. a Zone.

Question 23

Which of the following interface types can have an IP address assigned to it?

  1. Layer 3
  2. Layer 2
  3. Tap
  4. Virtual Wire

Question 24

As the Palo Alto Networks Administrator you have enabled Application Block pages. Afterwards, not knowing they are attempting to access a blocked web based application, users call the Help Desk to complain about network connectivity issues. What is the cause of the increased number of help desk calls?

  1. The File Blocking Block Page was disabled.
  2. Some AppID's are set with a Session Timeout value that is too low.
  3. The firewall admin did not create a custom response page to notify potential users that their attempt to access the web based application is being blocked due to policy.
  4. Application Block Pages will only be displayed when Captive Portal is configured.

Question 25

Security policies specify a source interface and a destination interface.

  1. True
  2. False