搜索
ac$ReviewButtoHNidmMkcnZsJGN27FE8F8FTest-AccreditedConfigurationEngineer(ACE)Exam-PAN-OS7.0Version1453454417874ACEExamQuestion1of50.AsofPAN-OS7.0,whenconfiguringaDecryptionPolicyRule,whichofthefollowingisNOTanavailableoptionasmatchingcriteriaintherule?*URLCategoryApplicationSourceZoneSourceUserServiceMarkforfollowupQuestion2of50.PAN-OS7.0introducedanewSecurityProfiletype.Whatisthenameofthisnewsecurityprofiletype?*ThreatAnalysisWildFireAnalysisFileAnalysisMalwareAnalysisMarkforfollowupQuestion3of50.WhichofthefollowingmostaccuratelydescribesDynamicIPinaSourceNATconfiguration?*AsingleIPaddressisused,andthesourceportnumberischanged.ThenextavailableIPaddressintheconfiguredpoolisused,butthesourceportnumberisunchanged.AsingleIPaddressisused,andthesourceportnumberisunchanged.Thenextavailableaddressintheconfiguredpoolisused,andthesourceportnumberischanged.MarkforfollowupQuestion4of50.PaloAltoNetworksoffersWildFireusersthreesolutiontypes.ThesesolutiontypesaretheWildFirePublicCloud,TheWF-500PrivateAppliance,andtheWildFireHybridsolution.WhatisthemainreasonandpurposefortheWildFireHybridsolution?*TheWildFireHybridsolutionenablesoutsidecompaniestosharethesameWF-500AppliancewhileatthesametimeallowingthemtosendonlytheirprivatefilestotheprivateWF-500.TheWildFireHybridsolutionenablescompaniestosendtotheWF-500PrivateAppliancekeepingtheminternaltotheirnetwork,aswellprovidingtheoptiontosendother,generalfilestotheWildFirePublicCloudforanalysis.TheWildFireHybridsolutionplacesWF-500satmultipleplacesinthecloud,sothatfirewallappliancesdistributedthroughoutanenterprise'snetworkreceiveWildFireverdictswithminimallatencywhileretainingdataprivacy.TheWildFireHybridsolutionisonlyofferedtocompaniesthathavesensitivefilestoprotectanddoesnotrequireaWildFiresubscription.MarkforfollowupQuestion5of50.WhichofthefollowinginterfacetypescanhaveanIPaddressassignedtoit?*Layer3Layer2TapVirtualWireMarkforfollowupQuestion6of50.TrueorFalse:ThePAN-DBURLFilteringServiceisofferedasbothaPrivateCloudsolutionandaPublicCloudsolution.TrueFalseMarkforfollowupQuestion7of50.TrueorFalse:TheWildFireAnalysisProfilecanonlybeconfiguredtosendunknownfilestotheWildFirePublicCloudonly.TrueFalseMarkforfollowupQuestion8of50.AlloftheinterfacesonaPaloAltoNetworksdevicemustbeofthesameinterfacetype.TrueFalseMarkforfollowupQuestion9of50.Whatisthemaximumfilesizeof.EXEfilesuploadedfromthefirewalltoWildFire?*Always10megabytes.Configurableupto10megabytes.Configurableupto2megabytes.Always2megabytes.MarkforfollowupQuestion10of50.Attackerswillemployanumberoftacticstohidemalware.Onesuchtacticistoencodeand/orcompressthefilesoastohidethemalware.WithPAN-OS7.0thefirewallcandecodeuptofourlevels.Butifanattackerhasencodedthefilebeyondfourlevels,whatcanyouasanadministerdotoprotectyourusers?*CreateaDecryptionProfileformulti-levelencodedfilesandapplyittoaDecryptionPolicy.CreateaFileBlockingProfileformulti-levelencodedfileswiththeactionsettoblock.CreateaFileBlockingProfileformulti-levelencodedfilesandapplyittoaDecryptionPolicy.CreateaDecryptionPolicyformulti-levelencodedfilesandsettheactiontoblock.MarkforfollowupQuestion11of50.WhatwillbetheuserexperiencewhenthesafesearchoptionisNOTenabledforGooglesearchbutthefirewallhasSafeSearchEnforcementEnabled?*Theuserwillberedirectedtoadifferentsearchsitethatisspecifiedbythefirewalladministrator.AblockpagewillbepresentedwithinstructionsonhowtosetthestrictSafeSearchoptionfortheGooglesearch.TheFirewallwillenforceSafeSearchiftheURLfilteringlicenseisstillvalid.Ataskbarpop-upmessagewillbepresentedtoenableSafeSearch.MarkforfollowupQuestion12of50.WhichofthefollowingisNOTavalidoptionforbuilt-inCLIAdminroles?*deviceadminread/writedevicereadersuperuserMarkforfollowupQuestion13of50.PaloAltoNetworksfirewallssupporttheuseofbothDynamic(built-inuserroles)andRole-Based(customizeduserroles)forAdministratorAccounts.TrueFalseMarkforfollowupQuestion14of50.BesidesselectingtheHeartbeatBackupoptionwhencreatinganActive-PassiveHAPair,whichofthefollowingalsopreventsSplit-Brain?*CreatingacustominterfaceunderServiceRouteConfiguration,andassigningthisinterfaceasthebackupHA2link.ConfiguringanindependentbackupHA1link.Under“PacketForwarding”,selectingtheVRSynccheckbox.ConfiguringabackupHA2linkthatpointstotheMGTinterfaceoftheotherdeviceinthepair.MarkforfollowupQuestion15of50.WhatarethebenefitsgainedwhentheEnablePassiveDNSMonitoringcheckboxischosenonthefirewall?(Selectallcorrectanswers.)ImprovedmalwaredetectioninWildFire.ImprovedPAN-DBmalwaredetection.ImprovedBrightCloudmalwaredetection.ImprovedDNS-basedC&Csignatures.MarkforfollowupQuestion16of50.WhichofthefollowingisaroutingprotocolsupportedinaPaloAltoNetworksfirewall?*EIGRPRIPv2IGRPISISMarkforfollowupQuestion17of50.WhatisthedefaultDNSsinkholeaddressusedbythePaloAltoNetworksFirewalltocutoffcommunication?*Anylayer3interfaceaddressspecifiedbythefirewalladministrator.Thedefaultgatewayofthefirewall.Thelocalloopbackaddress.TheMGTinterfaceaddress.MarkforfollowupQuestion18of50.WhichofthefollowingCANNOTusethesourceuserasamatchcriterion?*QoSSecuirtyPolici