QUESTION: 65

In PANOS 6.0, rule numbers are:

Numbers that specify the order in which security policies are evaluated.
Numbers created to be unique identifiers in each firewall's policy database.
Numbers on a scale of 0 to 99 that specify priorities when two or more rules are in conflict.
Numbers created to make it easier for users to discuss a complicated or difficult sequence of rules.

Answer(s): A

Reveal Solution Next Question

QUESTION: 66

Which of the following statements is NOT True regarding a Decryption Mirror interface?

Requires superuser privilege
Supports SSL outbound
Can be a member of any VSYS
Supports SSL inbound

Answer(s): C

Reveal Solution Next Question

QUESTION: 67

What is the correct policy to most effectively block Skype?

Allow Skype, block Skype-probe
Allow Skype-probe, block Skype
Block Skype-probe, block Skype
Block Skype

Answer(s): A

Reveal Solution Next Question

QUESTION: 68

To properly configure DOS protection to limit the number of sessions individually from specific source IPs you would configure a DOS Protection rule with the following characteristics:

Action: Protect, Classified Profile with "Resources Protection" configured, and Classified Address with "source-ip-only" configured
Action: Deny, Aggregate Profile with "Resources Protection" configured
Action: Protect, Aggregate Profile with "Resources Protection" configured
Action: Deny, Classified Profile with "Resources Protection" configured, and Classified Address with "source-ip-only" configured

Answer(s): A

Reveal Solution Next Question

Free ACE Exam Braindumps (page: 17)

QUESTION: 65

QUESTION: 66

QUESTION: 67

QUESTION: 68