ACE Training & Certification Get Latest Aviatrix Certification Updated on Sep 09, 2021
Certification Training for ACE Exam Dumps Test Engine
NEW QUESTION 26
"What is the result of an Administrator submitting a WildFire report's verdict back to Palo Alto Networks as
"Incorrect"?
- A. The signature will be updated for False positive and False negative files in the next Application signature update.
- B. You will receive an update within 15 minutes.
- C. You will receive an email to disable the signature manually.
- D. The signature will be updated for False positive and False negative files in the next AV signature update.
Answer: D
NEW QUESTION 27
In Active/Active HA environments, redundancy for the HA3 interface can be achieved by:
- A. Configuring HA3 in a redundant group
- B. Configuring a corresponding HA4 interface
- C. Configuring multiple HA3 interfaces
- D. Configuring HA3 as an Aggregate Ethernet bundle
Answer: D
NEW QUESTION 28
When Network Address Translation has been performed on traffic, Destination Zones in Security rules should be
based on:
- A. Post-NAT addresses
- B. None of the above
- C. Pre-NAT addresses
- D. The same zones used in the NAT rules
Answer: A
NEW QUESTION 29
In a Destination NAT configuration, the Translated Address field may be populated with either an IP address or an
Address Object.
- A. True
- B. False
Answer: A
NEW QUESTION 30
Which AWS feature does Aviatrix integrate with to provide Public Subnet Filtering for Ingress Internet Traffic to a VPC?
- A. AWS WAF
- B. AWS GuardDuty
- C. AWS inspector
- D. AWS Shield
Answer: B
NEW QUESTION 31
You'd like to schedule a firewall policy to only allow a certain application during a particular time of day. Where can this policy option be configured?
- A. Policies > Security > Options
- B. Policies > Security > Service
- C. Policies > Security > Profile
- D. Policies > Security > Application
Answer: C
NEW QUESTION 32
In Active/Active HA environments, redundancy for the HA3 interface can be achieved by
- A. Configuring HA3 in a redundant group
- B. Configuring a corresponding HA4 interface
- C. Configuring multiple HA3 interfaces
- D. Configuring HA3 as an Aggregate Ethernet bundle
Answer: D
NEW QUESTION 33
As the Palo Alto Networks administrator, you have enabled Application Block pages. Afterward, some users do not
receive web-based feedback for all denied applications. Why would this be?
- A. Application Block Pages will only be displayed when Captive Portal is configured
- B. Some users are accessing the Palo Alto Networks firewall through a virtual system that does not have Application
Block pages enabled. - C. Application Block Pages will only be displayed when users attempt to access a denied web-based application.
- D. Some Application ID's are set with a Session Timeout value that is too low.
Answer: C
NEW QUESTION 34
Choose two statements that best describe Aviatrix UserVPN/OpenVPN service?
- A. Can integrate with DUO for MFA
- B. Requires AWS NAT Gateway
- C. Is limited to one Gateway per VPC/VNET
- D. Can integrate with Active Directory
Answer: A,B
NEW QUESTION 35
When configuring UserID on a Palo Alto Networks firewall, what is the proper procedure to limit User mappings to a
particular DHCP scope?
- A. In the DHCP settings on the Palo Alto Networks firewall, point the DHCP Relay to the IP address of the UserID
agent. - B. Under the User Identification settings, under the User Mapping tab, select the "Restrict Users to Allocated IP"
checkbox. - C. In the zone in which User Identification is enabled, create a User Identification ACL Include List using the same IP
ranges as those allocated in the DHCP scope. - D. In the zone in which User Identification is enabled, select the "Restrict Allocated IP" checkbox.
Answer: C
NEW QUESTION 36
Administrative Alarms can be enabled for which of the following except?
- A. Security Violation Thresholds
- B. Traffic Log capacity
- C. Certificate Expirations
- D. Security Policy Tags
Answer: C
NEW QUESTION 37
What is a challenge of using VNet peering for transit in Azure?
- A. Doesn't scale well as its a 1:1 mapping
- B. Requires BGP to be configured
- C. Limited to a single region
- D. Limited bandwidth available over peering connections
Answer: A
NEW QUESTION 38
Which of the following is True of an application filter?
- A. An application filter specifies the users allowed to access an application.
- B. An application filter is used by malware to evade detection by firewalls and anti-virus software.
- C. An application filter automatically includes a new application when one of the new application's characteristics are included in the filter.
- D. An application filter automatically adapts when an application moves from one IP address to another.
Answer: C
NEW QUESTION 39
Aviatrix Controller provides a VPC Creator tool that allows customers to create VPC, VNETs across multiple clouds like AWS, GCP, Azure and OCI from single pane of glass.
- A. True
- B. False
Answer: A
NEW QUESTION 40
When employing the Brightcloud URL filtering database on the Palo Alto Networks firewalls, the order of checking within a profile is:
- A. Block List, Allow List, Cache Files, Custom Categories, Predefined Categories, Dynamic URL Filtering
- B. Block List, Allow List, Custom Categories, Cache Files, Predefined Categories, Dynamic URL Filtering
- C. None of the above
- D. Dynamic URL Filtering, Block List, Allow List, Cache Files, Custom Categories, Predefined Categories
Answer: B
NEW QUESTION 41
Where is the 'center of gravity' in the new computing model?
- A. On Prem
- B. Public Cloud
- C. Private Cloud
- D. Provider
Answer: B
NEW QUESTION 42
......
Step by Step Guide to Prepare for ACE Exam: https://www.realvalidexam.com/ACE-real-exam-dumps.html
Aviatrix Certification ACE Real Exam Questions and Answers FREE Updated: https://drive.google.com/open?id=1J8PgZgG89jTbc7fzmwjF9a2GC4yimj2l
