The "Disable Server Return Inspection" option on a security profile:

Can only be configured in Tap Mode
Should only be enabled on security policies allowing traffic to a trusted server.
Does not perform higher-level inspection of traffic from the side that originated the TCP SYN packet
Only performs inspection of traffic from the side that originated the TCP SYN-ACK packet

Answer(s): B

Which of the following facts about dynamic updates is correct?

Antivirus updates are released daily. Application and Threat updates are released weekly.
Application and Antivirus updates are released weekly. Threat and "Threat and URL Filtering" updates are released weekly.
Application and Threat updates are released daily. Antivirus and URL Filtering updates are released weekly.
Threat and URL Filtering updates are released daily. Application and Antivirus updates
are released weekly.

Answer(s): A

When setting up GlobalProtect, what is the job of the GlobalProtect Portal? Select the best answer

To maintain the list of remote GlobalProtect Portals and list of categories for checking the client machine
To maintain the list of GlobalProtect Gateways and list of categories for checking the client machine
To load balance GlobalProtect client connections to GlobalProtect Gateways
None of the above

Answer(s): B

If the Forward Proxy Ready shows "no" when running the command show system setting ssl-decrypt setting, what is most likely the cause?

Answer(s): D

Free ACE Exam Braindumps (page: 14)