Free ACE Exam braindumps download (ACE exam dumps Free)

When configuring a Security Policy Rule based on FQDN Address Objects, which of the following statements is True?

The firewall resolves the FQDN first when the policy is committed, and resolves the FQDN again each time Security Profiles are evaluated.
The firewall resolves the FQDN first when the policy is committed, and resolves the FQDN again at DNS TTL expiration.
In order to create FQDN-based objects, you need to manually define a list of associated IP addresses.

Answer(s): B

With PAN-OS 5.0, how can a common NTP value be pushed to a cluster of firewalls?

Answer(s): B

Color-coded tags can be used on all of the items listed below EXCEPT:

Answer(s): D

What are two sources of information for determining whether the firewall has been successful in communicating with an external UserID Agent?

System Logs and the indicator light under the UserID Agent settings in the firewall.
Traffic Logs and Authentication Logs.
System Logs and an indicator light on the chassis.
System Logs and Authentication Logs.

Answer(s): A

In PANOS 6.0, rule numbers are:

Numbers that specify the order in which security policies are evaluated.
Numbers created to be unique identifiers in each firewall's policy database.
Numbers on a scale of 0 to 99 that specify priorities when two or more rules are in conflict.
Numbers created to make it easier for users to discuss a complicated or difficult sequence of rules.

Answer(s): A

Free ACE Exam Braindumps Accredited Configuration Engineer (ACE) Questions 61–65 (page: 14)