Online Access Free PaloAltoNetworks.ACE.v2021-10-21.q67 Practice Test (Page 13)

ACE Exam Question 56

To properly configure DOS protection to limit the number of sessions individually from specific source IPs you would
configure a DOS Protection rule with the following characteristics:

A.Action: Deny, Aggregate Profile with "Resources Protection" configured

B.Action: Protect, Aggregate Profile with "Resources Protection" configured

C.Action: Protect, Classified Profile with "Resources Protection" configured, and Classified Address with "source-ip-
only" configured

D.Action: Deny, Classified Profile with "Resources Protection" configured, and Classified Address with "source-ip-only"
configured

ACE Exam Question 57

When creating a Security Policy to allow Facebook in PAN-OS 5.0, how can you be sure that no other web-browsing traffic is permitted?

A.No other configuration is required on the part of the administrator, since implicit application dependencies will be added automatically.

B.When creating the rule, ensure that web-browsing is added to the same rule. Both applications will be processed by the Security policy, allowing only Facebook to be accessed. Any other applications can be permitted in subsequent rules.

C.Create a subsequent rule which blocks all other traffic

D.Ensure that the Service column is defined as "application-default" for this security rule. This will automatically include the implicit web-browsing application dependency.

ACE Exam Question 58

Which best describes how Palo Alto Networks firewall rules are applied to a session?

A.last match applied

B.all matches applied

C.most specific match applied

D.first match applied

ACE Exam Question 59

Application block pages can be enabled for which applications?

A.any

B.MGT port*based

C.web*based

D.non*TCP/IP

ACE Exam Question 60

Aviatrix platform provides rich capabilities around networking, security and operations in public cloud networks. In addition to Aviatrix Transit, it also helps customers overcome limitations of native public cloud constructs. Below, match the Aviatrix platform capability for AWS Transit Gateway (TGW) with the appropriate problem description.