Free ACE Exam braindumps download (ACE exam dumps Free)

When troubleshooting Phase 1 of an IPSec VPN tunnel, what location will have the most informative logs?

Answer(s): C

Which of the following must be configured when deploying User-ID to obtain information from an 802.1x authenticator?

Terminal Server Agent
An Agentless deployment of User-ID, employing only the Palo Alto Networks Firewall
A User-ID agent, with the "Use for NTLM Authentication" option enabled.
XML API for User-ID Agent

Answer(s): D

The "Disable Server Return Inspection" option on a security profile:

Can only be configured in Tap Mode
Should only be enabled on security policies allowing traffic to a trusted server.
Does not perform higher-level inspection of traffic from the side that originated the TCP SYN packet
Only performs inspection of traffic from the side that originated the TCP SYN-ACK packet

Answer(s): B

Which of the following facts about dynamic updates is correct?

Antivirus updates are released daily. Application and Threat updates are released weekly.
Application and Antivirus updates are released weekly. Threat and "Threat and URL Filtering" updates are released weekly.
Application and Threat updates are released daily. Antivirus and URL Filtering updates are released weekly.
Threat and URL Filtering updates are released daily. Application and Antivirus updates
are released weekly.

Answer(s): A

When setting up GlobalProtect, what is the job of the GlobalProtect Portal? Select the best answer

To maintain the list of remote GlobalProtect Portals and list of categories for checking the client machine
To maintain the list of GlobalProtect Gateways and list of categories for checking the client machine
To load balance GlobalProtect client connections to GlobalProtect Gateways
None of the above

Answer(s): B

Free ACE Exam Braindumps Accredited Configuration Engineer (ACE) Questions 51–55 (page: 12)