[2022] ACE.pdf – Questions Answers PDF Sample Questions Reliable [Q43-Q61]

ExamBoosts April 6, 2022 ACE > Aviatrix 0

Rate this post

[2022] ACE.pdf – Questions Answers PDF Sample Questions Reliable

Aviatrix ACE Dumps PDF Are going to be The Best Score

NEW QUESTION 43
Choose two statements that best describe Aviatrix UserVPN/OpenVPN service?

Requires AWS NAT Gateway

Is limited to one Gateway per VPC/VNET

Can integrate with DUO for MFA

Can integrate with Active Directory

NEW QUESTION 44
Which of the following interface types can have an IP address assigned to it? (Select all correct answers.)

Layer 3

Layer 2

Tap

Virtual Wire

NEW QUESTION 45
Which fields can be altered in the default Vulnerability profile?

Severity

Category

CVE

None

NEW QUESTION 46
InPAN-OS 8.0which of the available choices serves as an alert warning by defining patterns of suspicious traffic and network anomalies that may indicate a host has been compromised?

App-ID Signatures

Correlation Objects

Command & Control Signatures

Correlation Events

Custom Signatures

NEW QUESTION 47
Will an exported configuration contain Management Interface settings?

Yes

NEW QUESTION 48
In PAN-OS 5.0, how is Wildfire enabled?

Via the URL-Filtering “Continue” Action

Wildfire is automaticaly enabled with a valid URL-Filtering license

A custom file blocking action must be enabled for all PDF and PE type files

Via the “Forward” and “Continue and Forward” File-Blocking actions

NEW QUESTION 49
Operations team has noticed that during the peak working hours, Aviatrix Gateway’s throughput utilization stays around 80% of the current instance size. A decision has been made to scale up the instance size to provide more throughput. Which below statement accurately describes instance sizing of Aviatrix Gateways?

Aviatrix Gateways can scale down but not scale up

Aviatrix Gateways instance size has to be chosen at deployment and can’t change later

Aviatrix Gateways can scale up but not scale down

Aviatrix Gateways can scale up and down both

NEW QUESTION 50

Taking into account only the information in the screenshot above, answer the following question. An administrator is
using SSH on port 3333 and BitTorrent on port 7777. Which statements are true?

The BitTorrent traffic will be allowed.

The SSH traffic will be allowed.

The SSH traffic will be denied.

The BitTorrent traffic will be denied.

NEW QUESTION 51
As of PAN-OS 7.0, when configuring a Decryption Policy Rule, which of the following is NOT an available option as
matching criteria in the rule?

Application

Source User

URL Category

Source Zone

Service

NEW QUESTION 52
Operations team has noticed that during the peak working hours, Aviatrix Gateway’s throughput utilization stays around 80% of the current instance size. A decision has been made to scale up the instance size to provide more throughput. Which below statement accurately describes instance sizing of Aviatrix Gateways?

Aviatrix Gateways can scale down but not scale up

Aviatrix Gateways instance size has to be chosen at deployment and can’t change later

Aviatrix Gateways can scale up but not scale down

Aviatrix Gateways can scale up and down both

NEW QUESTION 53
“What is the result of an Administrator submitting a WildFire report’s verdict back to Palo Alto Networks as “Incorrect”?

The signature will be updated for False positive and False negative files in the next AV signature update.

The signature will be updated for False positive and False negative files in the next Application signature update.

You will receive an email to disable the signature manually.

You will receive an update within 15 minutes.

NEW QUESTION 54
As per the cloud architecture best practices guidelines in Multi-Cloud Network Architecture (MCNA), which component provides a consistent transit available in all regions across all public cloud providers.

Cloud Operations Layer

Global Transit Layer

Cloud Applications Layer

Cloud Security Layer

NEW QUESTION 55
Taking into account only the information in the screenshot above, answer the following question. Which applications will be allowed on their standard ports? (Select all correct answers.)

BitTorrent

Gnutella

Skype

SSH

NEW QUESTION 56
In an Anti-Virus profile, changing the action to “Block” for IMAP or POP decoders will result in the following:

The connection from the server will be reset

The Anti-virus profile will behave as if “Alert” had been specified for the action

The traffic will be dropped by the firewall

Error 541 being sent back to the server

NEW QUESTION 57
To allow the PAN device to resolve internal and external DNS host names for reporting and for security policies, an
administrator can do the following:

Create a DNS Proxy Object with a default DNS Server for external resolution and a DNS server for internal domain.
Then, in the device settings, point to this proxy object for DNS resolution.

Create a DNS Proxy Object with a default DNS Server for external resolution and a DNS server for internal domain.
Then, in the device settings, select the proxy object as the Primary DNS and create a custom security rule which
references that object for

In the device settings set the Primary DNS server to an external server and the secondary to an internal server.

In the device settings define internal hosts via a static list.

NEW QUESTION 58
A “Continue” action can be configured on the following Security Profiles:

URL Filtering, File Blocking, and Data Filtering

URL Filteringn

URL Filtering and Antivirus

URL Filtering and File Blocking

NEW QUESTION 59
With IKE, each device is identified to the other by a Peer ID. In most cases, this is just the public IP address of the
device. In situations where the public ID is not static, this value can be replaced with a domain name or other text
value

True

False

NEW QUESTION 60
“What is the result of an Administrator submitting a WildFire report’s verdict back to Palo Alto Networks as
“Incorrect”?

The signature will be updated for False positive and False negative files in the next AV signature update.

The signature will be updated for False positive and False negative files in the next Application signature update.

You will receive an email to disable the signature manually.

You will receive an update within 15 minutes.

NEW QUESTION 61
ACE Inc. has a VNet-A hosting Database services which is peered with several app VNets. There is a new requirement to add another CIDR to VNet-A. How can you prevent a database connectivity outage for all the peered VNets while performing this task?

Use powershell to update the VNet-A CIDR

You cannot add a CIDR to a VNet after It has been created

It’s not possible to perform this action without an outage as you need to delete all existing peering before new CIDR can be added

First modify peering routes for all the VNets to add the new CIDR and then add the new CIDR to VNET-A

Loading …