Online Access Free PaloAltoNetworks.ACE.v2021-10-21.q67 Practice Test (Page 4)

ACE Exam Question 11

Enabling "Highlight Unsused Rules" in the Security policy window will:

A.Hightlight all rules that did not immmediately match traffic.

B.Hightlight all rules that did not match traffic since the rule was created or since last reboot of the firewall

C.Allow the administrator to temporarily disable rules that do not match traffic, for testing purposes

D.Allows the administrator to troubleshoot rules when a validation error occurs at the time of commit.

ACE Exam Question 12

To allow the PAN device to resolve internal and external DNS host names for reporting and for security policies, an administrator can do the following:

A.Create a DNS Proxy Object with a default DNS Server for external resolution and a DNS server for internal domain. Then, in the device settings, select the proxy object as the Primary DNS and create a custom security rule which references that object for

B.Create a DNS Proxy Object with a default DNS Server for external resolution and a DNS server for internal domain. Then, in the device settings, point to this proxy object for DNS resolution.

C.In the device settings define internal hosts via a static list.

D.In the device settings set the Primary DNS server to an external server and the secondary to an internal server.

ACE Exam Question 13

Few key differences between Aviatrix based transit and other non-Aviatrix 3rd party transit (such as Cisco CSR) are: (Choose 2)

A.Cisco CSR based transit lets you choose any instance size. Throughput will depend on the instance size characteristics

B.With default settings, Cisco CSR based transit can do 1.25 Gbps encrypted throughput whereas Aviatrix can do up to 70 Gbps

C.Aviatrix based transit can do 1.25 Gbps encrypted throughput whereas Cisco CSR can do up to 70 Gbps

D.Aviatrix transit architecture lets you choose any instance size. Throughput will depend on the instance size characteristics

ACE Exam Question 14

Which of the following must be configured when deploying User-ID to obtain information from an 802.1x authenticator?

A.An Agentless deployment of User-ID, employing only the Palo Alto Networks Firewall

B.A User-ID agent, with the "Use for NTLM Authentication" option enabled.

C.Terminal Server Agent

D.XML API for User-ID Agent

ACE Exam Question 15

Which of the following interface types can have an IP address assigned to it?

A.Layer 2

B.Virtual Wire

C.Tap

D.Layer 3

Premium Bundle

Newest ACE Exam PDF Dumps shared by Actual4test.com for Helping Passing ACE Exam! Actual4test.com now offer the updated ACE exam dumps, the Actual4test.com ACE exam questions have been updated and answers have been corrected get the latest Actual4test.com ACE pdf dumps with Exam Engine here:

Access ACE Premium Version

(74 Q&As Dumps, 30%OFF Special Discount: Freepdfdumps)

Other Version: 3302PaloAltoNetworks.ACE.v2022-12-06.q80; 85Palo-Alto-Networks.Testkingpass.ACE.v2022-05-23.by.arno.58q.pdf; 3121PaloAltoNetworks.ACE.v2022-03-16.q58; 111Palo-Alto-Networks.Pass4training.ACE.v2021-09-20.by.carey.65q.pdf

Latest Upload: 127ACSM.020-222.v2025-09-11.q48; 156VMware.5V0-31.23.v2025-09-10.q73; 130Oracle.1z0-915-1.v2025-09-10.q24; 159Citrix.1Y0-231.v2025-09-10.q87; 134SAP.C-THR85-2505.v2025-09-09.q29; 164Adobe.AD0-E727.v2025-09-09.q76; 128Oracle.1Z0-1123-25.v2025-09-09.q20; 134SAP.C_SIGPM_2403.v2025-09-08.q20; 247EXIN.ITIL.v2025-09-08.q161; 167BCS.PC-BA-FBA-20.v2025-09-08.q45