[UPDATED 2022] Aviatrix ACE Questions Prepare with Free Demo of PDF [Q42-Q65]

NEW QUESTION 42
Which of the following most accurately describes Dynamic IP in a Source NAT configuration?

NEW QUESTION 43
In PAN-OS 5.0, how is Wildfire enabled?

NEW QUESTION 44
An operator needs to create a new VPC, VCN or VNet using Aviatrix Controller.
Can the operator use Aviatrix VPC Tracker feature to validate potential CIDR/Prefix/Address space duplication across multiple clouds?

NEW QUESTION 45
What are the benefits gained when the “Enable Passive DNS Monitoring” checkbox is chosen on the firewall? (Select all correct answers.)

NEW QUESTION 46
AWS Security Group, Azure Network Security Group, GCP Firewall Service, by default support FQDN based firewall rules (e.g. www.yahoo.com) as a destination in their configuration, to allow/block traffic to the specified domain.
GCP Firewall Service, others not AWS Security Group does, others not

NEW QUESTION 47
Statefull Firewall rule:

NEW QUESTION 48
If the Forward Proxy Ready shows “no” when running the command show system setting ssl-decrypt setting, what is most likely the cause?

NEW QUESTION 49
Which fields can be altered in the default Vulnerability Protection Profile?

NEW QUESTION 50
In order to route traffic between layer 3 interfaces on the PAN firewall you need:

NEW QUESTION 51
Palo Alto Networks firewalls support the use of both Dynamic (built-in user roles) and Role-Based (customized user roles).

NEW QUESTION 52
A local/enterprise PKI system is required to deploy outbound forward proxy SSL decryption capabilities.

NEW QUESTION 53
When employing the BrightCloud URL filtering database in a Palo Alto Networks firewall, the order of evaluation
within a profile is:

NEW QUESTION 54
Which of the following CANNOT use the source user as a match criterion?

NEW QUESTION 55
After the installation of a new Application and Threat database, the firewall must be rebooted.

NEW QUESTION 56
Match the issues of deploying firewalls in public cloud to appropriate problem statement.

NEW QUESTION 57
Which three MGT port configuration settings are required in order to access the WebUI?(Choose three.)

NEW QUESTION 58
In an Anti-Virus profile, changing the action to “Block” for IMAP or POP decoders will result in the following:

NEW QUESTION 59
Aviatrix platform has several operational features and capabilities built-in to help network engineers perform day to day operational tasks.
Below, match the Aviatrix platform feature with the operational problem it addresses.

NEW QUESTION 60
Choose the correct behavior around software upgrade and security patching of Aviatrix Platform. (Choose 2)

NEW QUESTION 61
Match the terminology to the appropriate Public Cloud provider.

NEW QUESTION 62
Which of the following would be a reason to use the PAN-OS XML API to communicate with a Palo Alto Networks
firewall?

NEW QUESTION 63
In PANOS 6.0, rule numbers are:

NEW QUESTION 64
As the Palo Alto Networks administrator, you have enabled Application Block pages. Afterward, some users do not receive web-based feedback for all denied applications. Why would this be?

NEW QUESTION 65
When configuring UserID on a Palo Alto Networks firewall, what is the proper procedure to limit User mappings to a
particular DHCP scope?