ACE Practice Test

In PAN-OS 5.0, which of the following features is supported with regards to IPv6?

A.

OSPF

B.

NAT64

C.

IPSec VPN tunnels

D.

None of the above

A "Continue" action can be configured on the following Security Profiles:

A.

URL Filtering, File Blocking, and Data Filtering

B.

URL Filteringn

C.

URL Filtering and Antivirus

D.

URL Filtering and File Blocking

What new functionality is provided in PAN-OS 5.0 by Palo Alto Networks URL Filtering
Database (PAN-DB)?

A.

The "Log Container Page Only" option can be employed in a URL-Filtering policy to
reduce the number of logging events.

B.

URL-Filtering can now be employed as a match condition in Security policy

C.

IP-Based Threat Exceptions can now be driven by custom URL categories

D.

Daily database downloads for updates are no longer required as devices stay in-sync
with the cloud.

You’d like to schedule a firewall policy to only allow a certain application during a particular time of day. Where can this policy option be configured?

A.

Policies > Security > Service

B.

Policies > Security > Options

C.

Policies > Security > Application

D.

Policies > Security > Profile

Without a WildFire subscription, which of the following files can be submitted by the
Firewall to the hosted WildFire virtualized sandbox?

A.

PE files only

B.

PDF files only

C.

MS Office doc/docx, xls/xlsx, and ppt/pptx files only

D.

PE and Java Applet (jar and class) only