Free ACE Exam Braindumps
Accredited Configuration Engineer (ACE) Questions 86–90 (page: 19)

Updated On: 10-Feb-2026

Administrative Alarms can be enabled for which of the following except?

  1. Certificate Expirations
  2. Security Violation Thresholds
  3. Security Policy Tags
  4. Traffic Log capacity

Answer(s): A



When an interface is in Tap mode and a policy action is set to block, the interface will send a TCP reset.

  1. True
  2. False

Answer(s): B



What are the benefits gained when the "Enable Passive DNS Monitoring" checkbox is chosen on the firewall? (Select all correct answers.)

  1. Improved DNSbased C&C signatures.
  2. Improved PANDB malware detection.
  3. Improved BrightCloud malware detection.
  4. Improved malware detection in WildFire.

Answer(s): A,B,D




Taking into account only the information in the screenshot above, answer the following question. An administrator is pinging 4.4.4.4 and fails to receive a response. What is the most likely reason for the lack of response?

  1. The interface is down.
  2. There is a Security Policy that prevents ping.
  3. There is no Management Profile.
  4. There is no route back to the machine originating the ping.

Answer(s): C



An interface in tap mode can transmit packets on the wire.

  1. True
  2. False

Answer(s): B



Viewing page 19 of 46
Viewing questions 91 - 95 out of 222 questions


Post your Comments and Discuss Palo Alto Networks ACE exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!