ACE Practice Test

An interface in Virtual Wire mode must be assigned an IP address.

A.

True

B.

False

Which of the following would be a reason to use the PAN-OS XML API to communicate
with a Palo Alto Networks firewall?

A.

To allow the firewall to push User-ID information to a Network Access Control (NAC)
device.

B.

To permit syslogging of User Identification events.

C.

To pull information from other network resources for User-ID.

Which option allows an administrator to segrate Panorama and Syslog traffic, so that the
Management Interface is not employed when sending these types of traffic?

A.

Custom entries in the Virtual Router, pointing to the IP addresses of the Panorama and
Syslog devices.

B.

Define a Loopback interface for the Panorama and Syslog Devices

C.

On the Device tab in the Web UI, create custom server profiles for Syslog and
Panorama

D.

Service Route Configuration

Which routing protocol is supported on the Palo Alto Networks platform?

A.

BGP

B.

RSTP

C.

ISIS

D.

RIPv1

If the Forward Proxy Ready shows “no” when running the command show system setting
ssl-decrypt setting, what is most likely the cause?

A.

SSL forward proxy certificate is not generated

B.

Web interface certificate is not generated

C.

Forward proxy license is not enabled on the box n

D.

SSL decryption rule is not created