PaloAlto_ACE认证考试题库及答案2016-1月

The default gateway of the firewall. The local loopback address. The MGT interface address.

Mark for follow up

Question 18 of 50.

Which of the following CANNOT use the source user as a match criterion? *

QoS

Secuirty Policies Anti-virus Profile DoS Protection Policy

Forwarding

Mark for follow up

Question 19 of 50.

When configuring the firewall for User-ID, what is the maximum number of Domain Controllers that can be configured?

Based

*

150 50 100 10

Mark for follow up

Question 20 of 50.

Previous to PAN-OS 7.0 the firewall was able to decode up to two levels. With PAN-OS 7.0 the firewall can now decode up to how many levels? *

Six Five Four Three

Mark for follow up

Question 21 of 50.

When configuring Admin Roles for Web UI access, what are the available access levels?

*

Enable and Disable only

Allow and Deny only

Enable, Read-Only, and Disable None, Superuser, Administrator

Mark for follow up

Question 22 of 50.

User-ID is enabled in the configuration of … *

An Interface.

A Security Profile. A Zone. A Security Policy.

Mark for follow up

Question 23 of 50.

Considering the information in the screenshot above, what is the order of evaluation for this URL

Device

Filtering Profile? *

Allow List, Block List, Custom Categories, URL Categories (BrightCloud or PAN-DB).

Block List, Allow List, URL Categories (BrightCloud or PAN-DB), Custom Categories.

Block List, Allow List, Custom Categories, URL Categories (BrightCloud or PAN-DB).

URL Categories (BrightCloud or PAN-DB), Custom Categories, Block List, Allow List.

Mark for follow up

Question 24 of 50.

Choose the best answer: In PAN-OS, the WildFire Subscription Service allows updates for malware signatures to be distributed as often as… *

Once an hour

Once a week Once every minutes Once a day

Mark for follow up

Question 25 of 50.

15