PaloAlto_ACE认证考试题库及答案2016-1月.docxVIP

Test - Accredited Configuration Engineer (ACE) Exam - PAN-OS 7.0 Version ACE Exam  Question 1 of 50.  As of PAN-OS 7.0, when configuring a Decryption Policy Rule, which of the following is NOT an available option as matching criteria in the rule?  ? * URL Category ? Application ? Source Zone ? Source User ? Service ? ?  Mark for follow up  Question 2 of 50.  PAN-OS 7.0 introduced a new Security Profile type. What is the name of this new security profile type?  ? * Threat Analysis ? WildFire Analysis ? File Analysis ? Malware Analysis ? ?  Mark for follow up  Question 3 of 50.  Which of the following most accurately describes Dynamic IP in a Source NAT configuration?  ? * A single IP address is used, and the source port number is changed. ? The next available IP address in the configured pool is used, but the source port number is unchanged. ? A single IP address is used, and the source port number is unchanged. ? The next available address in the configured pool is used, and the source port number is changed. ? ?  Mark for follow up  Question 4 of 50.  Palo Alto Networks offers WildFire users three solution types. These solution types are the WildFire Public Cloud, The WF-500 Private Appliance, and the WildFire Hybrid solution. What is the main reason and purpose for the WildFire Hybrid solution?  ? * The WildFire Hybrid solution enables outside companies to share the same WF-500 Appliance while at the same time allowing them to send only their private files to the private WF-500. ? The WildFire Hybrid solution enables companies to send to the WF-500 Private Appliance keeping them internal to their network, as well providing the option to send other, general files to the WildFire Public Cloud for analysis. ? The WildFire Hybrid solution places WF-500s at multiple places in the cloud, so that firewall appliances distributed throughout an enterprises network receive WildFire verdicts