PALO ALTO NETWORKS -Accredited Configuration Engineer Set 3

Question - 15 Maximum mark : - 25

Home
All Exams
PALO ALTO NETWORKS -Accredited Configuration Engineer Online Mock Tests
PALO ALTO NETWORKS -Accredited Configuration Engineer Set 3

In an Anti-Virus profile, changing the action to "Block" for IMAP or POP decoders will result in the following:

The connection from the server will be reset ✘ The Anti-virus profile will behave as if "Alert" had been specified for the action ✘ The traffic will be dropped by the firewall ✘ Error 541 being sent back to the server ✔

Answer & Solution Discuss in Board Save for Later

Answer & Solution

Answer: Option B

Solution:

It provides fallback for IE8.

After configuring Captive Portal in Layer 3 mode, users in the Trust Zone are not receiving the Captive Portal authentication page when they launch their web browsers. How can this be corrected?

Ensure that all users in the Trust Zone are using NTLM-capable browsers Enable "Response Pages" in the Interface Management Profile that is applied to the L3 Interface in the Trust Zone. Confirm that Captive Portal Timeout value is not set below 2 seconds Enable "Redirect " as the Mode type in the Captive Portal Settings

Answer & Solution Discuss in Board Save for Later

Answer & Solution

Answer: Option B

Solution:

It provides fallback for IE8.

The "Disable Server Return Inspection" option on a security profile:

Can only be configured in Tap Mode ✘ Should only be enabled on security policies allowing traffic to a trusted server. ✘ Does not perform higher-level inspection of traffic from the side that originated the TCP SYN packet ✘ Only performs inspection of traffic from the side that originated the TCP SYN-ACK packet ✔

Answer & Solution Discuss in Board Save for Later

Answer & Solution

Answer: Option B

Solution:

It provides fallback for IE8.

A user complains that they are no longer able to access a needed work application after you have implemented vulnerability and anti-spyware profiles. The user's application uses a unique port. What is the most efficient way to allow the user access to this application?

Utilize an Application Override Rule, referencing the custom port utilized by this application. Application Override rules bypass all Layer 7 inspection, thereby
allowing access to this application. ✘ In the Threat log, locate the event which is blocking access to the user's application and create a IP-based exemption for this user. ✘ In the vulnerability and anti-spyware profiles, create an application exemption for the user's application. ✘ Create a custom Security rule for this user to access the required application. Do not apply vulnerability and anti-spyware profiles to this rule. ✔

Answer & Solution Discuss in Board Save for Later

Answer & Solution

Answer: Option B

Solution:

It provides fallback for IE8.

You'd like to schedule a firewall policy to only allow a certain application during a particular time of day. Where can this policy option be configured?

Policies > Security > Service ✘ Policies > Security > Options ✘ Policies > Security > Application ✘ Policies > Security > Profile ✔

Answer & Solution Discuss in Board Save for Later

Answer & Solution

Answer: Option B

Solution:

It provides fallback for IE8.

What is the size limitation of files manually uploaded to WildFire?

Configurable up to 10 megabytes ✘ Hard-coded at 10 megabytes ✘ Hard-coded at 2 megabytes ✘ Configurable up to 20 megabytes ✔

Answer & Solution Discuss in Board Save for Later

Answer & Solution

Answer: Option B

Solution:

It provides fallback for IE8.

Enabling "Highlight Unused Rules" in the Security policy window will:

Highlight all rules that did not immediately match traffic. ✘ Highlight all rules that did not match traffic since the rule was created or since last reboot of the firewall. ✘ Allows the administrator to troubleshoot rules when a validation error occurs at the time of commit. ✘ Allow the administrator to temporarily disable rules that do not match traffic, for testing purposes. ✔

Answer & Solution Discuss in Board Save for Later

Answer & Solution

Answer: Option B

Solution:

It provides fallback for IE8.

When creating a Security Policy to allow Facebook in PAN-OS 5.0, how can you be sure that no other web-browsing traffic is permitted?

Ensure that the Service column is defined as "application-default" for this security rule. This will automatically include the implicit web-browsing application
dependency. ✘ Create a subsequent rule which blocks all other traffic ✘ When creating the rule, ensure that web-browsing is added to the same rule. Both applications will be processed by the Security policy, allowing only Facebookto be accessed. Any other applications can be permitted in subsequent rules. ✘ No other configuration is required on the part of the administrator, since implicit application dependencies will be added automatically. ✔

Answer & Solution Discuss in Board Save for Later

Answer & Solution

Answer: Option B

Solution:

It provides fallback for IE8.

In PAN-OS 5.0, how is Wildfire enabled?

Via the URL-Filtering "Continue" Action ✘ Wildfire is automatically enabled with a valid URL-Filtering license ✘ A custom file blocking action must be enabled for all PDF and PE type files ✘ Via the "Forward" and "Continue and Forward" File-Blocking actions ✔

Answer & Solution Discuss in Board Save for Later

Answer & Solution

Answer: Option B

Solution:

It provides fallback for IE8.

10.

When configuring Security rules based on FQDN objects, which of the following statements are true?

The firewall resolves the FQDN first when the policy is committed, and is refreshed each time Security rules are evaluated. ✘ The firewall resolves the FQDN first when the policy is committed, and is refreshed at TTL expiration. There is no limit on the number of IP addresses stored foreach resolved FQDN. ✘ In order to create FQDN-based objects, you need to manually define a list of associated IP. Up to 10 IP addresses can be configured for each FQDN entry. ✘ The firewall resolves the FQDN first when the policy is committed, and is refreshed at TTL expiration. The resolution of this FQDN stores up to 10 different IPaddresses. ✔

Answer & Solution Discuss in Board Save for Later

Answer & Solution

Answer: Option B

Solution:

It provides fallback for IE8.

Prev Next

Congratulations

you have successfully completed the test

Back to Question View Result

Detail Form

We will send your result on your email id and phone no. please fill detail

Name

Email ID Note: Report will be send to the above Email ID

Phone No

PALO ALTO NETWORKS -Accredited Configuration Engineer Set 3

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Congratulations

COMPANY

Products

OTHERS

Partner