Online Access Free PaloAltoNetworks.ACE.v2022-12-06.q80 Practice Test (Page 11)

ACE Exam Question 46

When adding an application in a Policy-based Forwarding rule, only a subset of the entire App-ID database is
represented. Why would this be?

A.The license for the Application ID database is no longer valid.

B.A custom application must first be defined before it can be added to a Policy-based forwarding rule.

C.Policy-based forwarding rules require that a companion Security policy rule, allowing the needed Application
traffic, must first be created.

D.Policy-based forwarding can only indentify certain applications at this stage of the packet flow, as the majority of
applications are only identified once the session is created.

ACE Exam Question 47

What is a challenge of using VNet peering for transit in Azure?

A.Limited bandwidth available over peering connections

B.Doesn't scale well as its a 1:1 mapping

C.Requires BGP to be configured

D.Limited to a single region

ACE Exam Question 48

Choose the two best statements that describe challenges of deploying a NextGen Firewall (NGFW) in public cloud. (Choose 2)

A.Reduced effective throughput of the NGFW

B.Reduced visibility due to NAT

C.Firewalls can only be deployed in Active/Active

D.Reduced firewall feature availability

E.Firewalls can only be deployed in Active/Standby

ACE Exam Question 49

Aviatrix platform provides rich capabilities around networking, security and operations in public cloud networks. In addition to Aviatrix Transit, it also helps customers overcome limitations of native public cloud constructs. Below, match the Aviatrix platform capability for AWS Transit Gateway (TGW) with the appropriate problem description.