ACE

ACE practice questions, page 6 of 7, with answer review and explanations.

Question 26

Select the implicit rules that are applied to traffic that fails to match any administrator defined Security Policies.

  1. Intrazone traffic is allowed
  2. Interzone traffic is denied
  3. Intrazone traffic is denied
  4. Interzone traffic is allowed

Question 27

Besides selecting the Heartbeat Backup option when creating an ActivePassive HA Pair, which of the following also prevents "SplitBrain"?

  1. Creating a custom interface under Service Route Configuration, and assigning this interface as the backup HA2 link.
  2. Under "Packet Forwarding", selecting the VR Sync checkbox.
  3. Configuring an independent backup HA1 link.
  4. Configuring a backup HA2 link that points to the MGT interface of the other device in the pair.

Question 28

Which of the following statements is NOT True regarding a Decryption Mirror interface?

  1. Requires superuser privilege
  2. Supports SSL outbound
  3. Can be a member of any VSYS
  4. Supports SSL inbound

Question 29

Considering the information in the screenshot above, what is the order of evaluation for this URL Filtering Profile?

  1. URL Categories (BrightCloud or PANDB),
  2. Custom Categories, Block List, Allow List.
  3. Block List, Allow List, URL Categories (BrightCloud or PANDB), Custom Categories.
  4. Block List, Allow List, Custom Categories, URL Categories (BrightCloud or PANDB).
  5. Allow List, Block List, Custom Categories, URL Categories (BrightCloud or PANDB).

Question 30

An interface in tap mode can transmit packets on the wire.

  1. True
  2. False