Latest [Mar 17, 2022] Aviatrix ACE Exam Practice Test To Gain Brilliante Result [Q20-Q40]

NEW QUESTION 20
When a user logs in via Captive Portal, their user information can be checked against:

NEW QUESTION 21
When a Palo Alto Networks firewall is forwarding traffic through interfaces configured for L2 mode, security policies
can be set to match on multicast IP addresses.

NEW QUESTION 22
The User*ID feature is enabled per __________?

NEW QUESTION 23
Which interface type does NOT require any configuration changes to adjacent network devices?

NEW QUESTION 24
WildFire analyzes files to determine whether or not they are malicious. When doing so, WildFire will classify the file
with an official verdict. This verdict is known as the WildFire Analysis verdict. Choose the three correct classifications
as a result of this analysis and classification?

NEW QUESTION 25
Which one of the options describes the sequence of the GlobalProtect agent connecting to a Gateway?

NEW QUESTION 26
Using the API in PAN-OS 6.1, WildFire subscribers can upload up to how many samples per day?

NEW QUESTION 27
Operations team has noticed that during the peak working hours, Aviatrix Gateway’s throughput utilization stays around 80% of the current instance size. A decision has been made to scale up the instance size to provide more throughput. Which below statement accurately describes instance sizing of Aviatrix Gateways?

NEW QUESTION 28
Will an exported configuration contain Management Interface settings?

NEW QUESTION 29
What are the benefits gained when the “Enable Passive DNS Monitoring” checkbox is chosen on the firewall?

NEW QUESTION 30
Select the implicit rules that are applied to traffic that fails to match any administrator defined Security Policies.

NEW QUESTION 31
As a Palo Alto Networks firewall administrator, you have made unwanted changes to the Candidate configuration. These changes may be undone by Device > Setup > Operations
>
Configuration Management>….and then what operation?

NEW QUESTION 32
When employing the Brightcloud URL filtering database on the Palo Alto Networks firewalls, the order of checking within a profile is:

NEW QUESTION 33
What is the default setting for ‘Action’ in a Decryption Policy’s rule?

NEW QUESTION 34
Palo Alto Networks firewalls support the use of both Dynamic (built-in user roles) and Role-Based (customized user roles).

NEW QUESTION 35

Considering the information in the screenshot above, what is the order of evaluation for this URL Filtering Profile?

NEW QUESTION 36
Which of the following are necessary components of a GlobalProtect solution?

NEW QUESTION 37
WildFire Analysis Reports are available for the following Operating Systems:

NEW QUESTION 38
ACE Inc. is currently using AWS Transit Gateway (TGW) with 100 VPCs attached to it from different security domains.
These 100 VPCs are used as following:
* 20 VPCs belong to Production,
* 40 VPCs belong to Development,
* 20 are part of UAT and
* 20 VPCs are for shared services and miscellanous common needs.
ACE Inc. requirements are to:
* provide network and traffic segmentation between Prod, Development, UAT VPCs such that there is no traffic between VPCs belonging to different domains
* allow all VPCs in each domain to communicate with each other
* allow every VPC access to shared services VPCs
Which Aviatrix feature would help to not only provide this segmentation but also decrease the complexity of this topology and routing configuration by orchestrating life-cycle management of AWS Transit Gateways?
(Choose 2)

NEW QUESTION 39
AWS Security Group, Azure Network Security Group, GCP Firewall Service, by default support FQDN based firewall rules (e.g. www.yahoo.com) as a destination in their configuration, to allow/block traffic to the specified domain.
GCP Firewall Service, others not AWS Security Group does, others not

NEW QUESTION 40
As per the cloud architecture best practices guidelines in Multi-Cloud Network Architecture (MCNA), which component provides a consistent transit available in all regions across all public cloud providers.