[Apr-2022] ACE Exam Questions and Valid ACE Dumps PDF [Q14-Q37]

NEW QUESTION 14
To allow the PAN device to resolve internal and external DNS host names for reporting and for security policies, an
administrator can do the following:

NEW QUESTION 15
When configuring a Decryption Policy Rule, which of the following are available as matching criteria in the rule? (Choose three.)

NEW QUESTION 16
Wildfire may be used for identifying which of the following types of traffic?

NEW QUESTION 17
Which feature can be configured to block sessions that the firewall cannot decrypt?

NEW QUESTION 18
Aviatrix Controller allows customers to export Netflow data from all or select Aviatrix Gateways to any Netflow collector on a custom port.

NEW QUESTION 19
The feature in Aviatrix Controller that allows customers to see path between two instances/AMI/EC2/VM (including, but not limited to Security Groups, ACLs, Routes, etc.) is called:

NEW QUESTION 20
Which fields can be altered in the default Vulnerability profile?

NEW QUESTION 21
Enabling “Highlight Unsused Rules” in the Security policy window will:

NEW QUESTION 22
What are two benefits of attaching a Decryption Profile to a Decryption policy no*decrypt rule?(Choose two.)

NEW QUESTION 23
When configuring Security rules based on FQDN objects, which of the following statements are true?

NEW QUESTION 24
Which of the following is NOT a valid option for built-in CLI access roles?

NEW QUESTION 25
Which type of license is required to perform Decryption Port Mirroring?

NEW QUESTION 26
Aviatrix Controller provides a VPC Creator tool that allows customers to create VPC, VNETs across multiple clouds like AWS, GCP, Azure and OCI from single pane of glass.

NEW QUESTION 27
Which three components can be sent to WildFire for analysis? (Choose three.)

NEW QUESTION 28
Which option allows an administrator to segrate Panorama and Syslog traffic, so that the Management Interface is not employed when sending these types of traffic?

NEW QUESTION 29
What are the connectivity options for customers to access Azure?

NEW QUESTION 30
As per the cloud architecture best practices guidelines in Multi-Cloud Network Architecture (MCNA), which component provides a consistent transit available in all regions across all public cloud providers.

NEW QUESTION 31
WildFire analyzes files to determine whether or not they are malicious. When doing so, WildFire will classify the file
with an official verdict. This verdict is known as the WildFire Analysis verdict. Choose the three correct classifications
as a result of this analysis and classification?

NEW QUESTION 32
Which of the following represents HTTP traffic events that can be used to identify potential Botnets?

NEW QUESTION 33
Which of the following most accurately describes Dynamic IP in a Source NAT configuration?

NEW QUESTION 34
WildFire Analysis Reports are available for the following Operating Systems (select all that apply)

NEW QUESTION 35
When SSL traffic passes through the firewall, which component is evaluated first?

NEW QUESTION 36
For which firewall feature should you create forward trust and forward untrust certificates?

NEW QUESTION 37
An interface in tap mode can transmit packets on the wire.