Updated Aviatrix ACE Dumps – Check Free ACE Exam Dumps (2023)
Updated ACE exam with Aviatrix Real Exam Questions
What is the duration, language, and format of Aviatrix Certified Engineer (ACE) Exam
- Language of Exam: English
- Passing percentage: 70%
- Format: Multiple choice
- Validity: 3 years
- Duration of Exam: 60 minutes
NEW QUESTION 31
To properly configure DOS protection to limit the number of sessions individually from specific source IPs you would configure a DOS Protection rule with the following characteristics:
- A. Action: Protect, Classified Profile with "Resources Protection" configured, and Classified Address with "source-ip-only" configured
- B. Action: Deny, Aggregate Profile with "Resources Protection" configured
- C. Action: Deny, Classified Profile with "Resources Protection" configured, and Classified Address with "source-ip-only" configured
- D. Action: Protect, Aggregate Profile with "Resources Protection" configured
Answer: A
NEW QUESTION 32
In PANOS 6.0 and later, which of these items may be used as match criterion in a PolicyBased Forwarding Rule? (Choose 3.)
- A. Source Zone
- B. Application
- C. Source User
- D. Destination Zone
Answer: A,B,C
NEW QUESTION 33 
Considering the information in the screenshot above, what is the order of evaluation for this URL Filtering Profile?
- A. Allow List, Block List, Custom Categories, URL Categories (BrightCloud or PANDB).
- B. Custom Categories, Block List, Allow List.
- C. Block List, Allow List, URL Categories (BrightCloud or PANDB), Custom Categories.
- D. Block List, Allow List, Custom Categories, URL Categories (BrightCloud or PANDB).
- E. URL Categories (BrightCloud or PANDB),
Answer: B
NEW QUESTION 34
In PAN-OS 7.0 which of the available choices serves as an alert warning by defining patterns of suspicious traffic and network anomalies that may indicate a host has been compromised?
- A. Correlation Objects
- B. Command & Control Signatures
- C. App-ID Signatures
- D. Custom Signatures
- E. Correlation Events
Answer: D
NEW QUESTION 35
Using AWS Terraform provider, a customer created an AWS Transit Gateway with 50 VPCs attached to it. After attaching the VPCs and spinning up some EC2 instances in them, none of the instances can communicate with each other. What should be done to resolve the issue?
- A. Create routing tables in each VPC, add CIDR for all the other VPCs in the routing table pointing to AWS Transit Gateway
- B. Configure BGP communities in VPC such that all VPCs that need to communicate with eachother have same community defined
- C. There must be security group rules blocking traffic as AWS auto configures VPC routing tables
- D. There must be security group rules blocking traffic as BGP in VPC auto configures VPC routing tables
Answer: C
NEW QUESTION 36
An interface in Virtual Wire mode must be assigned an IP address.
- A. True
- B. False
Answer: B
NEW QUESTION 37 
Considering the information in the screenshot above, what is the order of evaluation for this URL Filtering Profile?
- A. Allow List, Block List, Custom Categories, URL Categories (BrightCloud or PANDB).
- B. Custom Categories, Block List, Allow List.
- C. Block List, Allow List, URL Categories (BrightCloud or PANDB), Custom Categories.
- D. Block List, Allow List, Custom Categories, URL Categories (BrightCloud or PANDB).
- E. URL Categories (BrightCloud or PANDB),
Answer: B
NEW QUESTION 38
As a Cloud Networking Consultant, you are reviewing a Microsoft Azure Virtual WAN network design that will be used to connect several VNets, branches, users and a Data Center (using ExpressRoute). What are some known challenges with this design pattern? (Choose 3)
- A. Inability to selectively advertise routes
- B. No support for BGP
- C. Lack of encryption within the cloud
- D. Inability to have default any to any connectivity
- E. No support for multi-cloud
- F. No support for VPN Users
Answer: A,C,E
NEW QUESTION 39
Enabling "Highlight Unsused Rules" in the Security policy window will:
- A. Allows the administrator to troubleshoot rules when a validation error occurs at the time of commit.
- B. Hightlight all rules that did not match traffic since the rule was created or since last reboot of the firewall
- C. Hightlight all rules that did not immmediately match traffic.
- D. Allow the administrator to temporarily disable rules that do not match traffic, for testing purposes
Answer: B
NEW QUESTION 40 
Taking into account only the information in the screenshot above, answer the following question. An administrator is
using SSH on port 3333 and BitTorrent on port 7777. Which statements are true?
- A. The BitTorrent traffic will be allowed.
- B. The BitTorrent traffic will be denied.
- C. The SSH traffic will be denied.
- D. The SSH traffic will be allowed.
Answer: B,D
NEW QUESTION 41
Aviatrix platform has several operational features and capabilities built-in to help network engineers perform day to day operational tasks.
Below, match the Aviatrix platform feature with the operational problem it addresses.
Answer:
Explanation:
NEW QUESTION 42
A user complains that they are no longer able to access a needed work application after you have implemented vulnerability and anti-spyware profiles. The user's application uses a unique port. What is the most efficient way to allow the user access to this application?
- A. Create a custom Security rule for this user to access the required application. Do not apply vulnerability and anti-spyware profiles to this rule.
- B. Utilize an Application Override Rule, referencing the custom port utilzed by this application. Application Override rules bypass all Layer 7 inspection, thereby allowing access to this application.
- C. In the Threat log, locate the event which is blocking access to the user's application and create a IP-based exemption for this user.
- D. In the vulnerability and anti-spyware profiles, create an application exemption for the user's application.
Answer: C
NEW QUESTION 43
Which AWS feature does Aviatrix integrate with to provide Public Subnet Filtering for Ingress Internet Traffic to a VPC?
- A. AWS GuardDuty
- B. AWS Shield
- C. AWS inspector
- D. AWS WAF
Answer: D
NEW QUESTION 44
Operations team has noticed that during the peak working hours, Aviatrix Gateway's throughput utilization stays around 80% of the current instance size. A decision has been made to scale up the instance size to provide more throughput. Which below statement accurately describes instance sizing of Aviatrix Gateways?
- A. Aviatrix Gateways can scale down but not scale up
- B. Aviatrix Gateways instance size has to be chosen at deployment and can't change later
- C. Aviatrix Gateways can scale up and down both
- D. Aviatrix Gateways can scale up but not scale down
Answer: C
NEW QUESTION 45
What are two sources of information for determining whether the firewall has been successful in communicating with
an external UserID Agent?
- A. System Logs and Authentication Logs.
- B. Traffic Logs and Authentication Logs.
- C. System Logs and an indicator light on the chassis.
- D. System Logs and the indicator light under the UserID Agent settings in the firewall.
Answer: D
NEW QUESTION 46
Which of the following types of protection are available in DoS policy?
- A. Session Limit, SYN Flood, Host Swapping, UDP Flood
- B. Session Limit, SYN Flood, UDP Flood
- C. Session Limit, Port Scanning, Host Swapping, UDP Flood
- D. Session Limit, SYN Flood, Port Scanning, Host Swapping
Answer: B
NEW QUESTION 47
Which of the following is True of an application filter?
- A. An application filter specifies the users allowed to access an application.
- B. An application filter automatically includes a new application when one of the new application's characteristics are included in the filter.
- C. An application filter is used by malware to evade detection by firewalls and anti-virus software.
- D. An application filter automatically adapts when an application moves from one IP address to another.
Answer: B
NEW QUESTION 48
......
Actual ACE Exam Recently Updated Questions with Free Demo: https://testking.vceengine.com/ACE-vce-test-engine.html
