Free ACE Exam Braindumps
Accredited Configuration Engineer (ACE) Questions 56–60 (page: 13)

Updated On: 10-Feb-2026

If the Forward Proxy Ready shows "no" when running the command show system setting ssl-decrypt setting, what is most likely the cause?

  1. SSL forward proxy certificate is not generated
  2. Web interface certificate is not generated
  3. Forward proxy license is not enabled on the box n
  4. SSL decryption rule is not created

Answer(s): D



What Security Profile type must be configured to send files to the WildFire cloud, and with what choices for the action setting?

  1. A File Blocking profile with possible actions of "Forward" or "Continue and Forward".
  2. A Data Filtering profile with possible actions of "Forward" or "Continue and Forward".
  3. A Vulnerability Protection profile with the possible action of "Forward".
  4. A URL Filtering profile with the possible action of "Forward".

Answer(s): A



What new functionality is provided in PAN-OS 5.0 by Palo Alto Networks URL Filtering Database (PAN-DB)?

  1. The "Log Container Page Only" option can be employed in a URL-Filtering policy to reduce the number of logging events.
  2. URL-Filtering can now be employed as a match condition in Security policy
  3. IP-Based Threat Exceptions can now be driven by custom URL categories
  4. Daily database downloads for updates are no longer required as devices stay in-sync with the cloud.

Answer(s): D



Which fields can be altered in the default Vulnerability Protection Profile?

  1. Category
  2. Severity
  3. None

Answer(s): C



All of the interfaces on a Palo Alto Networks device must be of the same interface type.

  1. True
  2. False

Answer(s): B



Viewing page 13 of 46
Viewing questions 61 - 65 out of 222 questions


Post your Comments and Discuss Palo Alto Networks ACE exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!