Free ACE Exam Braindumps
Accredited Configuration Engineer (ACE) Questions 106–111 (page: 23)

Updated On: 10-Feb-2026

In which of the following can UserID be used to provide a match condition? (Select all correct answers.)

  1. Security Policies
  2. NAT Policies
  3. Zone Protection Policies
  4. Threat Profiles

Answer(s): A



When a user logs in via Captive Portal, their user information can be checked against:

  1. Terminal Server Agent
  2. Security Logs
  3. XML API
  4. Radius

Answer(s): D



Besides selecting the Heartbeat Backup option when creating an ActivePassive
HA Pair, which of the following also prevents "SplitBrain"?

  1. Creating a custom interface under Service Route Configuration, and assigning this interface as the backup HA2 link.
  2. Under "Packet Forwarding", selecting the VR Sync checkbox.
  3. Configuring an independent backup HA1 link.
  4. Configuring a backup HA2 link that points to the MGT interface of the other device in the pair.

Answer(s): D



As the Palo Alto Networks Administrator responsible for UserID, you need to enable mapping of network users that do not signin using LDAP. Which information source would allow for reliable UserID mapping while requiring the least effort to configure?

  1. Active Directory Security Logs
  2. WMI Query
  3. Captive Portal
  4. Exchange CAS Security logs

Answer(s): A



Traffic going to a public IP address is being translated by your PANW firewall to your web server's private IP. Which IP should the Security Policy use as the "Destination IP" in order to allow traffic to the server.

  1. The server's public IP
  2. The firewall's gateway IP
  3. The server's private IP
  4. The firewall's MGT IP

Answer(s): A



Viewing page 23 of 46
Viewing questions 111 - 115 out of 222 questions


Post your Comments and Discuss Palo Alto Networks ACE exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!