Updated Aug-2022 Test Engine or PDF for the Aviatrix ACE test to help you quickly prepare for the Aviatrix exam!
Full ACE Practice Test and 74 unique questions with explanations waiting just for you, get it now!
NEW QUESTION 38
Which interface type is NOT assigned to a security zone?
- A. HA
- B. Virtual Wire
- C. Layer 3
- D. VLAN
Answer: A
NEW QUESTION 39
What new functionality is provided in PAN-OS 5.0 by Palo Alto Networks URL Filtering Database (PAN- DB)?
- A. IP-Based Threat Exceptions can now be driven by custom URL categories
- B. Daily database downloads for updates are no longer required as devices stay in-sync with the cloud.
- C. The "Log Container Page Only" option can be employed in a URL-Filtering policy to reduce the number of logging events.
- D. URL-Filtering can now be employed as a match condition in Security policy
Answer: B
NEW QUESTION 40
Finding URLs matched to the not*resolved URL category in the URL Filtering log file might indicate that you should takewhich action?
- A. Reboot the firewall.
- B. Validate your Security policy rules.
- C. Re*download the URL seed database.
- D. Validate connectivity to the PAN-DB cloud.
Answer: D
NEW QUESTION 41
In PAN-OS 5.0, how is Wildfire enabled?
- A. Via the URL-Filtering "Continue" Action.
- B. Wildfire is automatically enabled with a valid URL-Filtering license
- C. Via the "Forward" and "Continue and Forward" File-Blocking actions
- D. A custom file blocking action must be enabled for all PDF and PE type files
Answer: C
NEW QUESTION 42
Which of the following can provide information to a Palo Alto Networks firewall for the purposes of User- ID?
- A. Network Access Control (NAC) device
- B. Domain Controller
- C. SSL Certificates
- D. RIPv2
Answer: A,B,C
NEW QUESTION 43
Which of the following represents HTTP traffic events that can be used to identify potential Botnets?
- A. Traffic from users that browse to IP addresses instead of fully-qualified domain names, traffic to domains that have been registered in the last 60 days, downloading executable files from unknown URL's, IRC-based Command and Control traffic
- B. Traffic from users that browse to IP addresses instead of fully-qualified domain names, downloading W32.Welchia.Worm from a Windows share, traffic to domains that have been registered in the last 30 days, downloading executable files from unknown URL's
- C. Traffic from users that browse to IP addresses instead of fully-qualified domain names, traffic to domains that have been registered in the last 30 days.
- D. Traffic from users that browse to IP addresses instead of fully-qualified domain names, traffic to domains that have been registered in the last 60 days, downloading executable files from unknown URL's
Answer: C
NEW QUESTION 44
Which fields can be altered in the default Vulnerability profile?
- A. Severity
- B. Category
- C. CVE
- D. None
Answer: D
NEW QUESTION 45
What needs to be done prior to committing a configuration in Panorama after making a change via the CLI or web
interface on a device?
- A. No additional actions required
- B. Make the same change again via Panorama
- C. Synchronize the configuration between the device and Panorama
- D. Re-import the configuration from the device into Panorama
Answer: A
NEW QUESTION 46
Which mode will allow a user to choose how they wish to connect to the GlobalProtect Network as they would like?
- A. Single Sign-On Mode
- B. On Demand Mode
- C. Always On Mode
- D. Optional Mode
Answer: B
NEW QUESTION 47
When configuring Admin Roles for Web UI access, what are the available access levels?
- A. Enable, Read-Only and Disable
- B. Allow and Deny only
- C. None, Superuser, Device Administrator
- D. Enable and Disable only
Answer: A
NEW QUESTION 48
Few key differences between Aviatrix based transit and other non-Aviatrix 3rd party transit (such as Cisco CSR) are: (Choose 2)
- A. Cisco CSR based transit lets you choose any instance size. Throughput will depend on the instance size characteristics
- B. Aviatrix based transit can do 1.25 Gbps encrypted throughput whereas Cisco CSR can do up to 70 Gbps
- C. With default settings, Cisco CSR based transit can do 1.25 Gbps encrypted throughput whereas Aviatrix can do up to 70 Gbps
- D. Aviatrix transit architecture lets you choose any instance size. Throughput will depend on the instance size characteristics
Answer: C,D
NEW QUESTION 49
Which type of content update does NOT have to be scheduled for download on the firewall?
- A. dynamic update threat signatures
- B. dynamic update antivirus signatures
- C. PAN-DB updates
- D. WildFire antivirus signatures
Answer: C
NEW QUESTION 50
An operator needs to create a new VPC, VCN or VNet using Aviatrix Controller.
Can the operator use Aviatrix VPC Tracker feature to validate potential CIDR/Prefix/Address space duplication across multiple clouds?
- A. False
- B. True
Answer: B
NEW QUESTION 51
Which three MGT port configuration settings are required in order to access the WebUI?(Choose three.)
- A. Default gateway
- B. IP address
- C. Hostname
- D. Netmask
Answer: A,B,D
NEW QUESTION 52
What are two sources of information for determining if the firewall has been successful in communicating with an external User-ID Agent?
- A. System Logs and the indicator light under the User-ID Agent settings in the firewall
- B. System Logs and indicator light on the chassis
- C. There's only one location - System Logs
- D. There's only one location - Traffic Logs
Answer: A
NEW QUESTION 53
The "Drive-By Download" protection feature, under File Blocking profiles in Content-ID, provides:
- A. Protection against unwanted downloads by showing the user a response page indicating that a file is going to be downloaded.
- B. Password-protected access to specific file downloads for authorized users.
- C. The ability to use Authentication Profiles, in order to protect against unwanted downloads.
- D. Increased speed on downloads of file types that are explicitly enabled.
Answer: A
NEW QUESTION 54
Which Aviatrix solution lets customers connect and manage their branch Cisco ISR routers to AWS or Azure without requiring any manual effort on branch routers or replacement of equipment?
- A. High Performance Encryption (Insane Mode)
- B. Direct Connect
- C. FlightPath
- D. CloudWAN
Answer: D
NEW QUESTION 55
......
Get Latest ACE Dumps Exam Questions: https://drive.google.com/open?id=1tU0xHEnzoqfXeUZysApZhjDI-hqlPtKI
Full ACE Practice Test and 74 unique questions with explanations waiting just for you, get it now: https://www.passcollection.com/ACE_real-exams.html
