PaloAlto_ACE认证考试题库及答案2016-1月(2)

What will be the user experience when the safe search option is NOT enabled for Google search but the firewall has \ *

The user will be redirected to a different search site that is specified by the firewall administrator.

A block page will be presented with instructions on how to set the strict Safe Search option for the Google search.

The Firewall will enforce Safe Search if the URL filtering license is still valid. A task bar pop-up message will be presented to enable Safe Search.

Mark for follow up

Question 12 of 50.

Which of the following is NOT a valid option for built-in CLI Admin roles? *

deviceadmin

read/write devicereader

superuser

Mark for follow up

Question 13 of 50.

Palo Alto Networks firewalls support the use of both Dynamic (built-in user roles) and Role-Based (customized user roles) for Administrator Accounts. True

Mark for follow up

Question 14 of 50.

Besides selecting the Heartbeat Backup option when creating an Active-Passive HA Pair, which of the following also prevents \ *

Creating a custom interface under Service Route Configuration, and assigning this interface as the backup HA2 link.

Configuring an independent backup HA1 link.

Under “Packet Forwarding”, selecting the VR Sync checkbox.

Configuring a backup HA2 link that points to the MGT interface of the other device in the pair.

Mark for follow up

Question 15 of 50.

What are the benefits gained when the \the firewall? (Select all correct answers.)

Improved malware detection in WildFire.

False

Improved PAN-DB malware detection. Improved BrightCloud malware detection. Improved DNS-based C&C signatures.

Mark for follow up

Question 16 of 50.

Which of the following is a routing protocol supported in a Palo Alto Networks firewall? *

EIGRP RIPv2 IGRP ISIS

Mark for follow up

Question 17 of 50.

What is the default DNS sinkhole address used by the Palo Alto Networks Firewall to cut off communication? *

Any layer 3 interface address specified by the firewall administrator.

The default gateway of the firewall. The local loopback address. The MGT interface address.

Mark for follow up

Question 18 of 50.

Which of the following CANNOT use the source user as a match criterion? *

QoS

Secuirty Policies Anti-virus Profile DoS Protection Policy

Forwarding

Mark for follow up

Question 19 of 50.

When configuring the firewall for User-ID, what is the maximum number of Domain Controllers that can be configured?

Based

*

150 50 100 10

Mark for follow up

Question 20 of 50.

Previous to PAN-OS 7.0 the firewall was able to decode up to two levels. With PAN-OS 7.0 the firewall can now decode up to how many levels? *

Six Five Four Three

Mark for follow up

Question 21 of 50.

When configuring Admin Roles for Web UI access, what are the available access levels?

百度搜索“77cn”或“免费范文网”即可找到本站免费阅读全部范文。收藏本站方便下次阅读，免费范文网，提供经典小说综合文库PaloAlto_ACE认证考试题库及答案2016-1月(2)在线全文阅读。