14/05/2017 RealizeYourPotential:paloaltonetworks

TestAccreditedConfigurationEngineer(ACE)ExamPANOS8.0Version

ACE8.0

Question1of40.

AServerProfileenablesafirewalltolocatewhichservertype?

aserverwithfirewallsoftwareupdates
aserverwithfirewallthreatupdates
aserverwithremoteuseraccounts
aserverwithanavailableVPNconnection

Markforfollowup

Question2of40.

AnAntivirusSecurityProfilespecifiesActionsandWildFireActions.WildfireActionsenableyoutoconfigurethefirewallto
performwhichoperation?

UploadtraffictoWildFirewhenavirusissuspected.
DownloadnewantivirussignaturesfromWildFire.
Deletepacketdatawhenavirusissuspected.
BlocktrafficwhenaWildFirevirussignatureisdetected.

Markforfollowup

Question3of40.

AnInterfaceManagementProfilecanbeattachedtowhichtwointerfacetypes?(Choosetwo.)
Layer3
Layer2
Tap
VirtualWire
Loopback

Markforfollowup

Question4of40.

AppIDrunningonafirewallidentifiesapplicationsusingwhichthreemethods?(Choosethree.)
Programheuristics
WildFirelookups
PANDBlookups
Knownprotocoldecoders
Applicationsignatures

Markforfollowup

Question5of40.

https://paloaltonetworks.csod.com/Evaluations/EvalLaunch.aspx?loid=6296516fbf5b4c19bb9a5223178f76d8&evalLvl=5&redirect_url=%2fphnx%2fdriver 1/9
14/05/2017 RealizeYourPotential:paloaltonetworks
Applicationblockpagescanbeenabledforwhichapplications?

nonTCP/IP
webbased
any
MGTportbased

Markforfollowup

Question6of40.

FindingURLsmatchedtothenotresolvedURLcategoryintheURLFilteringlogfilemightindicatethatyoushouldtake
whichaction?

RedownloadtheURLseeddatabase.
ValidateconnectivitytothePANDBcloud.
ValidateyourSecuritypolicyrules.
Rebootthefirewall.

Markforfollowup

Question7of40.

Forwhichfirewallfeatureshouldyoucreateforwardtrustandforwarduntrustcertificates?

SSLInboundInspectiondecryption
SSLclientsidecertificatechecking
SSLforwardproxydecryption
SSHdecryption

Markforfollowup

Question8of40.

IfaDNSsinkholeisconfigured,anysinkholeactionsindicatingapotentiallyinfectedhostarerecordedinwhichlogtype?

DataFiltering
WildFireSubmissions
Threat
Traffic

Markforfollowup

Question9of40.

IfthereisanHAconfigurationmismatchbetweenfirewallsduringpeernegotiation,whichstatewillthepassivefirewall
enter?

PASSIVE
NONFUNCTIONAL
ACTIVE
INITIAL

Markforfollowup

Question10of40.
https://paloaltonetworks.csod.com/Evaluations/EvalLaunch.aspx?loid=6296516fbf5b4c19bb9a5223178f76d8&evalLvl=5&redirect_url=%2fphnx%2fdriver 2/9
14/05/2017 RealizeYourPotential:paloaltonetworks

InaSecurityProfile,whichactiondoesafirewalltakewhentheprofilesactionisconfiguredasResetServer?(Choose
two.)
ForUDPsessions,theconnectionisreset.
ForUDPsessions,theconnectionisdropped.
Theclientisreset.
Thetrafficresponderisreset.

Markforfollowup

Question11of40.

InanHAconfiguration,whichthreecomponentsaresynchronizedbetweenthepairoffirewalls?(Choosethree.)
policies
networks
objects
logs

Markforfollowup

Question12of40.

InanHAconfiguration,whichthreefunctionsareassociatedwiththeHA1ControlLink?(Choosethree.)
synchronizingsessions
synchronizingconfiguration
exchangingheartbeats
exchanginghellos

Markforfollowup

Question13of40.

InanHAconfiguration,whichtwofailuredetectionmethodsrelyonICMPping?(Choosetwo.)
heartbeats
pathgroups
linkgroups
hellos

Markforfollowup

Question14of40.

TheUserIDfeatureisenabledper__________?

UserIDagent
firewallsecurityzone
firewallinterface
firewall

Markforfollowup

Question15of40.

https://paloaltonetworks.csod.com/Evaluations/EvalLaunch.aspx?loid=6296516fbf5b4c19bb9a5223178f76d8&evalLvl=5&redirect_url=%2fphnx%2fdriver 3/9
14/05/2017 RealizeYourPotential:paloaltonetworks
TheWildFirePortalwebsitesupportswhichthreeoperations?(Choosethree.)
reportincorrectverdicts
uploadfilestoWildFireforanalysis
requestfirewallWildFirelicenses
viewWildFireverdicts

Markforfollowup

Question16of40.

WhatarethetwoseparateplanesthatmakeupthePANOSarchitecture?(Choosetwo.)
dataplane
routingplane
HAplane
signatureprocessingplane
control/managementplane

Markforfollowup

Question17of40.

WhatarethreeconnectionmethodsfortheGlobalProtectagent?(Choosethree.)
PreLogon
Captchaportal
UserLogon
Ondemand

Markforfollowup

Question18of40.

WhatisacharacteristicofDynamicAdminRoles?

Theycanbedynamicallycreatedordeletedbyafirewalladministrator.
Roleprivilegescanbedynamicallyupdatedwithnewersoftwarereleases.
Roleprivilegescanbedynamicallyupdatedbyafirewalladministrator.
Theycanbedynamicallymodifiedbyexternalauthorizationsystems.

Markforfollowup

Question19of40.

WhatisausecasefordeployingPaloAltoNetworksNGFWinthepubliccloud?

costsavingsthroughonetimepurchaseofPaloAltoNetworkshardwareandsubscriptions
centralizingyourdatastorageonpremise
fasterWildFireanalysisresponsetime
extendingthecorporatedatacenterintothepubliccloud

Markforfollowup

Question20of40.

https://paloaltonetworks.csod.com/Evaluations/EvalLaunch.aspx?loid=6296516fbf5b4c19bb9a5223178f76d8&evalLvl=5&redirect_url=%2fphnx%2fdriver 4/9
14/05/2017 RealizeYourPotential:paloaltonetworks
WhatistheresultofperformingafirewallCommitoperation?

Thecandidateconfigurationbecomesthesavedconfiguration.
Thecandidateconfigurationbecomestherunningconfiguration.
Theloadedconfigurationbecomesthecandidateconfiguration.
Thesavedconfigurationbecomestheloadedconfiguration.

Markforfollowup

Question21of40.

WhenSSLtrafficpassesthroughthefirewall,whichcomponentisevaluatedfirst?

Decryptionexclusionslist
Securitypolicy
Decryptionpolicy
DecryptionProfile

Markforfollowup

Question22of40.

WheredoesaGlobalProtectclientconnecttofirstwhentryingtoconnecttothenetwork?

UserIDagent
GlobalProtectPortal
ADagent
GlobalProtectGateway

Markforfollowup

Question23of40.

Whichconditionmustexistbeforeafirewall'sinbandinterfacecanprocesstraffic?

Thefirewallmustbeassignedtoasecurityzone.
Thefirewallmustbeenabled.
Thefirewallmustnotbealoopbackinterface.
ThefirewallmustbeassignedanIPaddress.

Markforfollowup

Question24of40.

WhichfeatureisadynamicgroupingofapplicationsusedinSecuritypolicyrules?

dependentapplications
applicationfilter
implicitapplications
applicationgroup

Markforfollowup

Question25of40.

WhichfouractionscanbeappliedtotrafficmatchingaURLFilteringSecurityProfile?(Choosefour.)

https://paloaltonetworks.csod.com/Evaluations/EvalLaunch.aspx?loid=6296516fbf5b4c19bb9a5223178f76d8&evalLvl=5&redirect_url=%2fphnx%2fdriver 5/9
14/05/2017 RealizeYourPotential:paloaltonetworks
Continue

Alert
ResetClient
ResetServer
Override
Block

Markforfollowup

Question26of40.

WhichinterfacetypedoesNOTrequireanyconfigurationchangestoadjacentnetworkdevices?

VirtualWire
Tap
Layer3
Layer2

Markforfollowup

Question27of40.

WhichinterfacetypeisNOTassignedtoasecurityzone?

VirtualWire
HA
Layer3
VLAN

Markforfollowup

Question28of40.

WhichstatementdescribesafunctionprovidedbyanInterfaceManagementProfile?

Itdetermineswhichfirewallservicesareaccessiblefromexternaldevices.
Itdetermineswhichexternalservicesareaccessiblebythefirewall.
ItdeterminestheNetFlowandLLDPinterfacemanagementsettings.
Itdetermineswhichadministratorscanmanagewhichinterfaces.

Markforfollowup

Question29of40.

WhichstatementdescribestheExportnamedconfigurationsnapshotoperation?

Thecandidateconfigurationistransferredfrommemorytothefirewall'sstoragedevice.
Acopyoftheconfigurationisuploadedtothecloudasabackup.
Therunningconfigurationistransferredfrommemorytothefirewall'sstoragedevice.
Asavedconfigurationistransferredtoanexternalhostsstoragedevice.

Markforfollowup

Question30of40.

https://paloaltonetworks.csod.com/Evaluations/EvalLaunch.aspx?loid=6296516fbf5b4c19bb9a5223178f76d8&evalLvl=5&redirect_url=%2fphnx%2fdriver 6/9
14/05/2017 RealizeYourPotential:paloaltonetworks

WhichstatementistrueaboutaURLFilteringProfilecontinuepassword?

Thereisapasswordperfirewalladministratoraccount.
Thereisapasswordperwebsite.
Thereisasingle,perfirewallpassword.
Thereisapasswordpersession.

Markforfollowup

Question31of40.

WhichthreearevalidconfigurationoptionsinaWildFireAnalysisProfile?(Choosethree.)
maximumfilesize
filetypes
application
direction

Markforfollowup

Question32of40.

WhichthreecomponentscanbesenttoWildFireforanalysis?(Choosethree.)
filestraversingthefirewall
MGTinterfacetraffic
URLlinksfoundinemail
emailattachments

Markforfollowup

Question33of40.

Whichthreeinterfacetypescancontrolorshapenetworktraffic?(Choosethree.)
VirtualWire
Layer2
Layer3
Tap

Markforfollowup

Question34of40.

WhichthreeMGTportconfigurationsettingsarerequiredinordertoaccesstheWebUI?(Choosethree.)
Defaultgateway
Hostname
IPaddress
Netmask

Markforfollowup

Question35of40.

Whichthreenetworkmodesaresupportedbyactive/passiveHA?(Choosethree.)
https://paloaltonetworks.csod.com/Evaluations/EvalLaunch.aspx?loid=6296516fbf5b4c19bb9a5223178f76d8&evalLvl=5&redirect_url=%2fphnx%2fdriver 7/9
14/05/2017 RealizeYourPotential:paloaltonetworks

Layer2
Tap
Layer3
VirtualWire

Markforfollowup

Question36of40.

Whichthreestatementsaretrueregardingsessionsonthefirewall?(Choosethree.)
Theonlysessioninformationtrackedinthesessionlogsarethefivetuples.
Returntrafficisallowed.
Networkpacketsarealwaysmatchedtoasession.
SessionsarealwaysmatchedtoaSecuritypolicyrule.

Markforfollowup

Question37of40.

WhichtwoUserIDmethodsareusedtoverifyknownIPaddresstousermappings?(Choosetwo.)
CaptivePortal
ClientProbing
ServerMonitoring
SessionMonitoring

Markforfollowup

Question38of40.

WhichtypeofcontentupdatedoesNOThavetobescheduledfordownloadonthefirewall?

WildFireantivirussignatures
PANDBupdates
dynamicupdatethreatsignatures
dynamicupdateantivirussignatures

Markforfollowup

Question39of40.

Whichusermappingmethodisrecommendedforahighlymobileuserbase?

ClientProbing
GlobalProtect
ServerMonitoring
SessionMonitoring

Markforfollowup

Question40of40.

WhichUserIDusermappingmethodisrecommendedforenvironmentswhereusersfrequentlychangeIPaddresses?

https://paloaltonetworks.csod.com/Evaluations/EvalLaunch.aspx?loid=6296516fbf5b4c19bb9a5223178f76d8&evalLvl=5&redirect_url=%2fphnx%2fdriver 8/9
14/05/2017 RealizeYourPotential:paloaltonetworks
CaptivePortal
ClientProbing
ServerMonitoring
SessionMonitoring

Markforfollowup

Save/ReturnLater Summary

https://paloaltonetworks.csod.com/Evaluations/EvalLaunch.aspx?loid=6296516fbf5b4c19bb9a5223178f76d8&evalLvl=5&redirect_url=%2fphnx%2fdriver 9/9