Palo-Alto-Networks ACE Practice Exam Questions

Palo-Alto-Networks ACE Sample Question Answers

Question # 1

A user complains that they are no longer able to access a needed work application after you have implemented vulnerability and anti-spyware profiles. The user's application uses a unique port. What is the most efficient way to allow the user access to this application? 

A. Utilize an Application Override Rule, referencing the custom port utilzed by this application. Application Override rules bypass all Layer 7 inspection, thereby allowing access to this application. 
B. In the Threat log, locate the event which is blocking access to the user's application and create a IP-based exemption for this user. 
C. In the vulnerability and anti-spyware profiles, create an application exemption for the user's application. 
D. Create a custom Security rule for this user to access the required application. Do not apply vulnerability and anti-spyware profiles to this rule. 

Show Answer

Question # 2

After configuring Captive Portal in Layer 3 mode, users in the Trust Zone are not receiving the Captive Portal authentication page when they launch their web browsers. How can this be corrected?

 A. Ensure that all users in the Trust Zone are using NTLM-capable browsers 
B. Enable "Response Pages" in the Interface Management Profile that is applied to the L3 Interface in the Trust Zone. 
C. Confirm that Captive Portal Timeout value is not set below 2 seconds 
D. Enable "Redirect " as the Mode type in the Captive Portal Settings 

Show Answer

Question # 3

When setting up GlobalProtect, what is the job of the GlobalProtect Portal? Select the best answer 

A. To maintain the list of remote GlobalProtect Portals and list of categories for checking the client machine 
B. To maintain the list of GlobalProtect Gateways and list of categories for checking the client machine 
C. To load balance GlobalProtect client connections to GlobalProtect Gateways 
D. None of the above 

Show Answer

Question # 4

What is the size limitation of files manually uploaded to WildFire 

A. Configuarable up to 10 megabytes 
B. Hard-coded at 10 megabytes 
C. Hard-coded at 2 megabytes 
D. Configuarable up to 20 megabytes 

Show Answer

Question # 5

You can assign an IP address to an interface in Virtual Wire mode. 

A. True 
B. False 

Show Answer

Question # 6

You have decided to implement a Virtual Wire Subinterface. Which options can be used to classify traffic? 

A. Either VLAN tag or IP address, provided that each tag or ID is contained in the same zone. 
B. Subinterface ID and VLAN tag only 
C. By Zone and/or IP Classifier 
D. VLAN tag, or VLAN tag plus IP address (IP address, IP range, or subnet). 

Show Answer

Question # 7

Administrative Alarms can be enabled for which of the following except? 

A. Certificate Expirations
 B. Security Violation Thresholds
 C. Security Policy Tags 
D. Traffic Log capacity

Show Answer

Question # 8

As a Palo Alto Networks firewall administrator, you have made unwanted changes to the Candidate configuration. These changes may be undone by Device > Setup > Operations > Configuration Management>....and then what operation? 

A. Revert to Running Configuration 
B. Revert to last Saved Configuration 
C. Load Configuration Version 
D. Import Named Configuration Snapshot

Show Answer

Question # 9

Using the API in PAN-OS 6.1, WildFire subscribers can upload up to how many samples per day? 

A. 500 
B. 50 
C. 1000 
D. 10 

Show Answer

Question # 10

Can multiple administrator accounts be configured on a single firewall? 

A. Yes
 B. No

Show Answer