When configuring a Security Policy Rule based on FQDN Address Objects, which of the following statements is True?

The firewall resolves the FQDN first when the policy is committed, and resolves the FQDN again each time Security Profiles are evaluated.
The firewall resolves the FQDN first when the policy is committed, and resolves the FQDN again at DNS TTL expiration.
In order to create FQDN-based objects, you need to manually define a list of associated IP addresses.

Answer(s): B

With PAN-OS 5.0, how can a common NTP value be pushed to a cluster of firewalls?

Answer(s): B

Color-coded tags can be used on all of the items listed below EXCEPT:

Answer(s): D

What are two sources of information for determining whether the firewall has been successful in communicating with an external UserID Agent?

System Logs and the indicator light under the UserID Agent settings in the firewall.
Traffic Logs and Authentication Logs.
System Logs and an indicator light on the chassis.
System Logs and Authentication Logs.

Answer(s): A

Free ACE Exam Braindumps (page: 16)