ACE Dumps To Pass Aviatrix Exam in 24 Hours - PrepAwayPDF
Buy Latest ACE Exam Q&A PDF - One Year Free Update
NEW QUESTION # 30
In a Palo Alto Networks firewall, every interface in use must be assigned to a zone in order to process traffic.
- A. False
- B. True
Answer: B
NEW QUESTION # 31
To properly configure DOS protection to limit the number of sessions individually from specific source IPs you would configure a DOS Protection rule with the following characteristics:
- A. Action: Deny, Aggregate Profile with "Resources Protection" configured
- B. Action: Protect, Classified Profile with "Resources Protection" configured, and Classified Address with "source-ip-only" configured
- C. Action: Protect, Aggregate Profile with "Resources Protection" configured
- D. Action: Deny, Classified Profile with "Resources Protection" configured, and Classified Address with "source-ip-only" configured
Answer: B
NEW QUESTION # 32
All of the interfaces on a Palo Alto Networks device must be of the same interface type.
- A. False
- B. True
Answer: A
NEW QUESTION # 33
Match the Azure transit option below to the description which best describes it:
DRAG THE BOXES TO MATCH THE ANSWERS
Answer:
Explanation:
NEW QUESTION # 34
What will the user experience when attempting to access a blocked hacking website through a translation service such as Google Translate or Bing Translator?
- A. An "HTTP Error 503 Service unavailable" message.
- B. The browser will be redirected to the original website address.
- C. A "Blocked" page response when the URL filtering policy to block is enforced.
- D. A "Success" page response when the site is successfully translated.
Answer: C
NEW QUESTION # 35
What will the user experience when browsing a Blocked hacking website such as www.2600.com via Google
Translator?
- A. It will be redirected to www.2600.com
- B. It will be translated successfully
- C. User will get "HTTP Error 503 - Service unavailable" message
- D. The URL filtering policy to Block is enforced
Answer: D
NEW QUESTION # 36
In order for a customer to leverage Aviatrix Firenet to orchestrate the deployment and insertion of NGFWs, customers must leverage Aviatrix gateways in the spokes VPC/VNETs in order to program the necessary routing to insert the firewall into the traffic flow?
- A. False
- B. True
Answer: A
Explanation:
FireNet is a solution for integrating firewalls in the AWS TGW deployment.
* Aoer create Firewall Domain we have to launch Aviatrix FireNet Gateway.
This step leverages the Transit Network workflow to launch one Aviatrix gateway for FireNet deployment.
If you have HA enabled, it automatically sets up the HA gateway for FireNet deployment.
* Specify Security Domain for Firewall Inspeco on - if you wish to inspect traffic between on-prem to VPC, connect Aviatrix Edge Domain to the Firewall Domain. This means on-prem traffic to any Spoke VPC is routed to the firewall first and then it is forwarded to the destination Spoke VPC. Conversely, any Spoke VPC traffic destined to on-prem is routed to the firewall first and then forwarded to on-prem.
NEW QUESTION # 37
When employing the Brightcloud URL filtering database on the Palo Alto Networks firewalls, the order of checking within a profile is:
- A. Dynamic URL Filtering, Block List, Allow List, Cache Files, Custom Categories, Predefined Categories
- B. Block List, Allow List, Custom Categories, Cache Files, Predefined Categories, Dynamic URL Filtering
- C. Block List, Allow List, Cache Files, Custom Categories, Predefined Categories, Dynamic URL Filtering
- D. None of the above
Answer: B
NEW QUESTION # 38
In PAN-OS 5.0, how is Wildfire enabled?
- A. A custom file blocking action must be enabled for all PDF and PE type files
- B. Wildfire is automatically enabled with a valid URL-Filtering license
- C. Via the "Forward" and "Continue and Forward" File-Blocking actions
- D. Via the URL-Filtering "Continue" Action
Answer: D
NEW QUESTION # 39
Which Aviatrix Controller feature automates the configuration of AWS Transit Gateway, VPC Route Tables, Direct Connect learned routes and Security Domain?
- A. Aviatrix High Performance Encryption (HPE)
- B. Aviatrix AWS TGW Orchestrator
- C. Aviatrix Site to Cloud (S2C)
- D. Aviatrix Firewall Networks (FireNet)
Answer: B
NEW QUESTION # 40
Traffic going to a public IP address is being translated by a Palo Alto Networks firewall to an internal server's private IP address. Which IP address should the Security Policy use as the "Destination IP" in order to allow traffic to the server?
- A. The firewall's MGT IP
- B. The firewall's gateway IP
- C. The server's public IP
- D. The server's private IP
Answer: C
NEW QUESTION # 41
Which of the following interface types can have an IP address assigned to it?
- A. Tap
- B. Virtual Wire
- C. Layer 2
- D. Layer 3
Answer: D
NEW QUESTION # 42
In PAN-OS 7.0 which of the available choices serves as an alert warning by defining patterns of suspicious traffic and network anomalies that may indicate a host has been compromised?
- A. Correlation Objects
- B. App-ID Signatures
- C. Command & Control Signatures
- D. Custom Signatures
- E. Correlation Events
Answer: D
NEW QUESTION # 43
Which mode will allow a user to choose when they wish to connect to the Global Protect Network?
- A. Always On mode
- B. Single SignOn mode
- C. Optional mode
- D. On Demand mode
Answer: D
NEW QUESTION # 44
In PAN-OS 7.0 which of the available choices serves as an alert warning by defining patterns of suspicious traffic and
network anomalies that may indicate a host has been compromised?
- A. Correlation Objects
- B. App-ID Signatures
- C. Command & Control Signatures
- D. Custom Signatures
- E. Correlation Events
Answer: D
NEW QUESTION # 45
Azure Firewall (native services):
SELECT THE CORRECT ANSWER
- A. Perform Load Balancing and SNAT automatically
- B. Handles UDR updates and route propagation for all peered spoke VNETs
- C. By default provides Malware protection, IDS (intrusion Detection) and IPS.....
- D. Is encrypting the traffic in transit
Answer: A
Explanation:
Azure Firewall includes the following features:* Built-in high availability
* Availability Zones
* Unrestricted cloud scalability
* Application FQDN filtering rules
* Network traffic filtering rules
* FQDN tags
* Service tags
* Threat intelligence
* Outbound SNAT support
* Inbound DNAT support
* Multiple public IP addresses
* Azure Monitor logging
* Forced tunneling
* Certifications
NEW QUESTION # 46
How do you reduce the amount of information recorded in the URL Content Filtering Logs?
- A. Enable DSRI.
- B. Enable URL log caching.
- C. Disable URL packet captures.
- D. Enable "Log container page only".
Answer: D
NEW QUESTION # 47
Configuring a pair of devices into an Active/Active HA pair provides support for:
- A. Higher session count
- B. Asymmetric routing environments
- C. Redundant Virtual Routers
- D. Lower fail-over times
Answer: C
NEW QUESTION # 48
What is the maximum file size of .EXE files uploaded from the firewall to WildFire?
- A. Always 10 megabytes.
- B. Always 2 megabytes.
- C. Configurable up to 10 megabytes.
- D. Configurable up to 2 megabytes.
Answer: C
NEW QUESTION # 49
Besides selecting the Heartbeat Backup option when creating an ActivePassive
HA Pair, which of the following also prevents "SplitBrain"?
- A. Configuring an independent backup HA1 link.
- B. Creating a custom interface under Service Route Configuration, and assigning this interface as the backup HA2 link.
- C. Under "Packet Forwarding", selecting the VR Sync checkbox.
- D. Configuring a backup HA2 link that points to the MGT interface of the other device in the pair.
Answer: D
NEW QUESTION # 50
What is the default setting for 'Action' in a Decryption Policy's rule?
- A. Decrypt
- B. Any
- C. None
- D. No-decrypt
Answer: C
NEW QUESTION # 51
Which four actions can be applied to traffic matching a URL Filtering Security Profile?
(Choosefour.)
- A. Override
- B. Alert
- C. Block
- D. Reset Client
- E. Reset Server
- F. Continue
Answer: A,B,C,F
NEW QUESTION # 52
......
Download the Latest ACE Dump - 2023 ACE Exam Question Bank: https://www.prepawaypdf.com/Aviatrix/ACE-practice-exam-dumps.html
Latest Aviatrix ACE Certification Practice Test Questions: https://drive.google.com/open?id=1fEVYPpU1H0-TV5TNKuozRkWTRxO-DZWW