Palo Alto Networks ACE Exam Questions
Accredited Configuration Engineer (ACE) (Page 4 )

Updated On: 24-Feb-2026

In an HA configuration, which two failure detection methods rely on ICMP ping? (Choose two.)

  1. hellos
  2. link groups
  3. path groups
  4. heartbeats

Answer(s): B,C



Which three statements are true regarding sessions on the firewall? (Choose three.)

  1. Return traffic is allowed.
  2. Network packets are always matched to a session.
  3. Sessions are always matched to a Security policy rule.
  4. The only session information tracked in the session logs are the five-tuples.

Answer(s): A,B,C



Which three network modes are supported by active/passive HA? (Choose three.)

  1. Tap
  2. Layer 3
  3. Virtual Wire
  4. Layer 2

Answer(s): B,C,D



Which statement describes the Export named configuration snapshot operation?

  1. The candidate configuration is transferred from memory to the firewall's storage device.
  2. The running configuration is transferred from memory to the firewall's storage device.
  3. A saved configuration is transferred to an external hosts storage device.
  4. A copy of the configuration is uploaded to the cloud as a backup.

Answer(s): C



Which interface type is NOT assigned to a security zone?

  1. VLAN
  2. HA
  3. Virtual Wire
  4. Layer 3

Answer(s): B






Post your Comments and Discuss Palo Alto Networks ACE exam dumps with other Community members:

Join the ACE Discussion