Updated May-2022 Exam Engine for ACE Exam Free Demo & 365 Day Updates [Q19-Q33] : Free Exam Dumps Collection : http://free.examcollectionpass.com

NEW QUESTION 19
After configuring Captive Portal in Layer 3 mode, users in the Trust Zone are not receiving the Captive Portal authentication page when they launch their web browsers. How can this be corrected?

Ensure that all users in the Trust Zone are using NTLM-capable browsers

Enable “Response Pages” in the Interface Management Profile that is applied to the L3 Interface in the Trust Zone.

Confirm that Captive Portal Timeout value is not set below 2 seconds

Enable “Redirect ” as the Mode type in the Captive Portal Settings

NEW QUESTION 20
Which Aviatrix Controller feature automates the configuration of AWS Transit Gateway, VPC Route Tables, Direct Connect learned routes and Security Domain?

Aviatrix Site to Cloud (S2C)

Aviatrix High Performance Encryption (HPE)

Aviatrix Firewall Networks (FireNet)

Aviatrix AWS TGW Orchestrator

NEW QUESTION 21
Which of the following types of protection are available in DoS policy?

Session Limit, SYN Flood, UDP Flood

Session Limit, Port Scanning, Host Swapping, UDP Flood

Session Limit, SYN Flood, Host Swapping, UDP Flood

Session Limit, SYN Flood, Port Scanning, Host Swapping

NEW QUESTION 22
What is/are the protocol(s) supported by Aviatrix Site2Cloud (S2C) Gateway?

GRE

UDP only

Both TCP and UDP

TCP only

NEW QUESTION 23
When adding an application in a Policy-based Forwarding rule, only a subset of the entire App-ID database is represented. Why would this be?

Policy-based forwarding can only indentify certain applications at this stage of the packet flow, as the majority of applications are only identified once the session is created.

Policy-based forwarding rules require that a companion Security policy rule, allowing the needed Application traffic, must first be created.

The license for the Application ID database is no longer valid.

A custom application must first be defined before it can be added to a Policy-based forwarding rule.

NEW QUESTION 24
Will an exported configuration contain Management Interface settings?

Yes

NEW QUESTION 25
If there is an HA configuration mismatch between firewalls during peer negotiation, whichstate will the passive firewallenter?

INITIAL

NON*FUNCTIONAL

PASSIVE

ACTIVE

NEW QUESTION 26
Which of the following is NOT a valid option for builtin CLI Admin roles?

deviceadmin

superuser

devicereader

read/write

NEW QUESTION 27
The “Disable Server Return Inspection” option on a security profile:

Can only be configured in Tap Mode

Should only be enabled on security policies allowing traffic to a trusted server.

Does not perform higher-level inspection of traffic from the side that originated the TCP SYN packet

Only performs inspection of traffic from the side that originated the TCP SYN-ACK packet

NEW QUESTION 28
Which of the following can provide information to a Palo Alto Networks firewall for the purposes of UserID? (Select all
correct answers.)

Domain Controller

SSL Certificates

RIPv2

Network Access Control (NAC) device

NEW QUESTION 29
Aviatrix Controller provides a VPC Creator tool that allows customers to create VPC, VNETs across multiple clouds like AWS, GCP, Azure and OCI from single pane of glass.

True

False

NEW QUESTION 30
Which statement below is True?

PANOS uses BrightCloud as its default URL Filtering database, but also supports PANDB.

PANOS uses PANDB for URL Filtering, replacing BrightCloud.

PANOS uses BrightCloud for URL Filtering, replacing PANDB.

PANOS uses PANDB as the default URL Filtering database, but also supports BrightCloud.

NEW QUESTION 31
WildFire Analysis Reports are available for the following Operating Systems (select all that apply)

Windows XP

Windows 7

Windows 8

Mac OS-X

NEW QUESTION 32
When using Config Audit, the color yellow indicates which of the following?

A setting has been changed between the two config files

A setting has been deleted from a config file.

A setting has been added to a config file

An invalid value has been used in a config file.

NEW QUESTION 33
Aviatrix platform provides rich capabilities around networking, security and operations in public cloud networks. In addition to Aviatrix Transit, it also helps customers overcome limitations of native public cloud constructs. Below, match the Aviatrix platform capability for AWS Transit Gateway (TGW) with the appropriate problem description.