Free ACE Exam Braindumps
Accredited Configuration Engineer (ACE) Questions 66–70 (page: 15)

Updated On: 10-Feb-2026

Which of the following statements is NOT True regarding a Decryption Mirror interface?

  1. Requires superuser privilege
  2. Supports SSL outbound
  3. Can be a member of any VSYS
  4. Supports SSL inbound

Answer(s): C



What is the correct policy to most effectively block Skype?

  1. Allow Skype, block Skype-probe
  2. Allow Skype-probe, block Skype
  3. Block Skype-probe, block Skype
  4. Block Skype

Answer(s): A



To properly configure DOS protection to limit the number of sessions individually from specific source IPs you would configure a DOS Protection rule with the following characteristics:

  1. Action: Protect, Classified Profile with "Resources Protection" configured, and Classified Address with "source-ip-only" configured
  2. Action: Deny, Aggregate Profile with "Resources Protection" configured
  3. Action: Protect, Aggregate Profile with "Resources Protection" configured
  4. Action: Deny, Classified Profile with "Resources Protection" configured, and Classified Address with "source-ip-only" configured

Answer(s): A



How do you reduce the amount of information recorded in the URL Content Filtering Logs?

  1. Enable "Log container page only".
  2. Disable URL packet captures.
  3. Enable URL log caching.
  4. Enable DSRI.

Answer(s): A



Which of the following Global Protect features requires a separate license?

  1. Use of dynamic selection between multiple Gateways
  2. Use of a Portal to allow users to connect
  3. Allowing users to connect
  4. Manual Gateway Selection

Answer(s): A



Viewing page 15 of 46
Viewing questions 71 - 75 out of 222 questions


Post your Comments and Discuss Palo Alto Networks ACE exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!