Released Aviatrix ACE Updated Questions PDF [Q44-Q60] – IT Certification Exam Questions & Answers

Rate this post

Released Aviatrix ACE Updated Questions PDF

ACE Dumps and Practice Test (74 Exam Questions)

NO.44 Wildfire may be used for identifying which of the following types of traffic?

Malware

DNS

DHCP

URL Content

NO.45 in an Azure setup where all VNETs are directly peered (full-mesh) using VNET Peering SELECT THE CORRECT ANSWERS

it is easy to insert a centralized FW

peering needs to be broken for VNET CIDR change

there are no real limitations for bandwidth

ExpressRoute Edge Router does the actual routing

NO.46 An Outbound SSL forward-proxy decryption rule cannot be created using which type of zone?

Virtual Wire

Tap

NO.47 Which of the following is NOT a valid option for built-in CLI access roles?

read/write

superusers

vsysadmin

deviceadmin

NO.48 The “Drive-By Download” protection feature, under File Blocking profiles in Content-ID, provides:

Password-protected access to specific file downloads, for authorized users increased speed on the downloads of
the allowed file types

Protection against unwanted downloads, by alerting the user with a response page indicating that file is going to be
downloaded

The Administrator the ability to leverage Authentication Profiles in order to protect against unwanted downloads

NO.49 In a Palo Alto Networks firewall, every interface in use must be assigned to a zone in order to process traffic.

True

False

NO.50 ACE Inc. has a Direct Connect for their on-premise location to connect to AWS. Security team has recently been notified of issues where employees and contractors working from the on-premise location are using non-corporate (personal or public) S3 buckets using ACE Inc.’s Direct Connect. This is overwhelming the Direct Connect and also showing the source of traffic to these S3 buckets as ACE Inc. which has potential compliance and security risks.
As a cloud architect, you are tasked with securing the Direct Connect for specific ACE Inc. corporate S3 buckets access only. Which Aviatrix feature can help ACE Inc. overcome this problem?

Aviatrix FlightPath

Aviatrix CoPilot

Aviatrix Private S3

Aviatrix Multi-Account Onboarding

NO.51 A “Continue” action can be configured on the following Security Profiles:

URL Filtering, File Blocking, and Data Filtering

URL Filteringn

URL Filtering and Antivirus

URL Filtering and File Blocking

NO.52 Which of the Dynamic Updates listed below are issued on a daily basis? (Select all correct answers.)

Applications

BrightCloud URL Filtering

Applications and Threats

Antivirus

NO.53 All of the interfaces on a Palo Alto Networks device must be of the same interface type.

True

False

NO.54 AWS Global Accelerator is a service which allows a direct connectivity between AWS DirectConnect and Azure ExpressRoute.

True

False

AWS Global Accelerator is a service that improves the availability and performance of your applications with local or global users. It provides static IP addresses that act as a fixed entry point to your application endpoints in a single or multiple AWS Regions, such as your Application Load Balancers, Network Load Balancers or Amazon EC2 instances.

NO.55 In PAN-OS 5.0, which of the following features is supported with regards to IPv6?

OSPF

NAT64

IPSec VPN tunnels

None of the above

NO.56 In PANOS 6.0, rule numbers are:

Numbers that specify the order in which security policies are evaluated.

Numbers created to be unique identifiers in each firewall’s policy database.

Numbers on a scale of 0 to 99 that specify priorities when two or more rules are in conflict.

Numbers created to make it easier for users to discuss a complicated or difficult sequence of rules.

NO.57 In a Palo Alto Networks firewall, every interface in use must be assigned to a zone in order to process traffic.

True

False

NO.58 As the Palo Alto Networks administrator responsible for User Identification, you are looking for the simplest method of mapping network users that do not sign into LDAP. Which information source would allow reliable User ID mapping for these users, requiring the least amount of configuration?

WMI Query

Exchange CAS Security Logs

Captive Portal

Active Directory Security Logs

NO.59 You can assign an IP address to an interface in Virtual Wire mode.

True

False

NO.60 When configuring a Decryption Policy rule, which option allows a firewall administrator to control SSHv2 tunneling in
policies by specifying the SSHtunnel AppID?

SSH Proxy

SSL Forward Proxy

SSL Inbound Inspection

SSL Reverse Proxy

Loading …