http://https://www.lead1pass.com/Palo-Alto-Networks/ACE-practice-exam-dumps.html (222 Q&As Dumps, 30%OFF Special Discount: 30free )

NEW QUESTION NO: 6
When configuring a Decryption Policy Rule, which of the following are available as matching criteria in the rule? (Choose three.)
A. Service
B. Application
C. Source User
D. URL Category
E. Source Zone
Answer: C,D,E

NEW QUESTION NO: 7
Security policies specify a source interface and a destination interface.
A. True
B. False
Answer: B

NEW QUESTION NO: 8
Besides selecting the Heartbeat Backup option when creating an ActivePassive HA Pair, which of the following also prevents "SplitBrain"?
A. Creating a custom interface under Service Route Configuration, and assigning this interface as the backup HA2 link.
B. Configuring an independent backup HA1 link.
C. Under "Packet Forwarding", selecting the VR Sync checkbox.
D. Configuring a backup HA2 link that points to the MGT interface of the other device in the pair.
Answer: D

NEW QUESTION NO: 9
An enterprise PKI system is required to deploy SSL Forward Proxy decryption capabilities.
A. True
B. False
Answer: B

NEW QUESTION NO: 10
What is the correct policy to most effectively block Skype?
A. Block Skype
B. Block Skype-probe, block Skype
C. Allow Skype-probe, block Skype
D. Allow Skype, block Skype-probe
Answer: D

NEW QUESTION NO: 11
Select the implicit rules enforced on traffic failing to match any user defined Security Policies:
A. Intra-zone traffic is allowed
B. Inter-zone traffic is allowed
C. Intra-zone traffic is denied
D. Inter-zone traffic is denied
Answer: A,D

NEW QUESTION NO: 12
Which feature can be configured to block sessions that the firewall cannot decrypt?
A. Decryption Profile in PBF
B. Decryption Profile in Security Policy
C. Decryption Profile in Security Profile
D. Decryption Profile in Decryption Policy
Answer: D

NEW QUESTION NO: 13
Which of the following options may be enabled to reduce system overhead when using Content ID?
A. STP
B. VRRP
C. DSRI
D. RSTP
Answer: C

NEW QUESTION NO: 14
As the Palo Alto Networks Administrator responsible for UserID, you need to enable mapping of network users that do not sign in using LDAP. Which information source would allow for reliable UserID mapping while requiring the least effort to configure?
A. Captive Portal
B. WMI Query
C. Exchange CAS Security logs
D. Active Directory Security Logs
Answer: D

NEW QUESTION NO: 15
Which of the following describes the sequence of the Global Protect agent connecting to a Gateway?
A. The Agent connects to the Portal obtains a list of Gateways, and connects to the Gateway with the fastest SSL response time
B. The agent connects to the closest Gateway and sends the HIP report to the portal
C. The agent connects to the portal and randomly establishes a connection to the first available gateway
D. The agent connects to the portal, obtains a list of gateways, and connects to the gateway with the fastest PING response time
Answer: A

NEW QUESTION NO: 16
How do you limit the amount of information recorded in the URL Content Filtering Logs?
A. Enable URL log caching
B. Enable Log container page only
C. Enable DSRI
D. Disable URL packet captures
Answer: B