ACE Exam Study Guide Free Practice Test LAST UPDATED DATE Feb 11, 2023 [Q28-Q50]

Q28. In an Anti-Virus profile, changing the action to “Block” for IMAP or POP decoders will result in the following:

Q29. Which of the following describes the sequence of the Global Protect agent connecting to a Gateway?

Q30. Which of the following types of protection are available in DoS policy?

Q31. Which statement accurately reflects the functionality of using regions as objects in Security policies?

Q32. In an Anti-Virus profile, changing the action to “Block” for IMAP or POP decoders will result in the following:

Q33. What will the user experience when browsing a Blocked hacking website such as www.2600.com via Google
Translator?

Q34. When a Palo Alto Networks firewall is forwarding traffic through interfaces configured for L2 mode, security policies
can be set to match on multicast IP addresses.

Q35. The Threat log records events from which three Security Profiles? (Choose three.)

Q36. Users may be authenticated sequentially to multiple authentication servers by configuring:

Q37. Which of the following platforms supports the Decryption Port Mirror function?

Q38. Which of the following is NOT a valid option for built-in CLI access roles?

Q39. Users may be authenticated sequentially to multiple authentication servers by configuring:

Q40. When configuring UserID on a Palo Alto Networks firewall, what is the proper procedure to limit User mappings to a
particular DHCP scope?

Q41. When allowing an Application in a Security policy on a PAN-OS 5.0 device, would a dependency Application need to
also be enabled if the application does not employ HTTP, SSL, MSRPC, RPC, t.120, RTSP, RTMP, and NETBIOS-SS.

Q42. Traffic going to a public IP address is being translated by a Palo Alto Networks firewall to an internal server’s private IP
address. Which IP address should the Security Policy use as the “Destination IP” in order to allow traffic to the server?

Q43. What built-in administrator role allows all rights except for the creation of administrative accounts and virtual systems?

Q44. UserID is enabled in the configuration of:

Q45. What Security Profile type must be configured to send files to the WildFire cloud, and with what choices for the action
setting?

Q46. In an HA configuration, which three components are synchronized between the pair of firewalls? (Choose three.)

Q47. Which three components can be sent to WildFire for analysis? (Choose three.)

Q48. Previous toPAN-OS 8.0the firewall was able to decode up to two levels. WithPAN-OS
8.0the firewall can now decode up to how many levels?

Q49. When setting up GlobalProtect, what is the job of the GlobalProtect Portal? Select the best answer

Q50. Which three are valid configuration options in a WildFire Analysis Profile? (Choose three.)