Latest [Feb 17, 2022] Aviatrix ACE Real Exam Dumps PDF [Q11-Q34]

Latest [Feb 17, 2022] Aviatrix ACE Real Exam Dumps PDF

ACE Practice Test Questions Updated 63 Questions

How to study the Aviatrix Certified Engineer (ACE) Exam

Aviatrix provides learning materials and courses on its website to help candidates perpare for the exam. ACE Multi-cloud network training portal provides access to all the associate, professional and design architect level courses. Best practice material is the ACE practice exams that allow complete understanding of the exam format and question types. Follow the links below to access these learning portals and materials. Join the Aviatrix community via the link down below to interact with fellow learners and seniors to help get better understanding by solving queries of each other and by sharing exam resources.

ACE Training Portal Online Course Study Notes Practice Tests Aviatrix Community

Topics of Aviatrix Certified Engineer (ACE) Exam

The Aviatrix Certified Engineer (ACE) Exam is further divided into 3 levels i.e. for Associates, professionals and design architects. Exam contents for each level certification vary. These core topics listed below are general recommendations for the material that is likely to be used for each examination level.

The updated syllabus effective for the Aviatrix Certified Engineer (ACE) Exam is listed below in detail of each section and their topics:

1. Cloud Networking Overview

This sections is comprised of the following subsections:

Cloud Native Networking 101 (AWS, Azure, GCP, OCI)
Networking Principles in the Cloud

2. Multi-Cloud Networking Architecture (MCNA)

This sections is comprised of the following subsections:

Cloud Native Networking Challenges and Limitations
Customer Problems/Pain Points
MCNA Details (Cloud Core, Access, Operations, Security)

3. Aviatrix Platform Overview

This sections is comprised of the following subsections:

Aviatrix Solution Components

4. Aviatrix Platform Features

This sections is comprised of the following subsections:

Cloud Access (User VPN, S2C, CloudWAN, etc.)
Cloud Security (HPE, FireNet, Private S3, Ingress/Egress, etc.)
Cloud Core (Transit Networking, etc.)
Extreme Cloud Visibility (Aviatrix CoPilot)
Cloud Operations and Troubleshooting

5. Customer Deployment Case-Study

6. Professional Level Modules

This section includes topics that are for both professional level and design architect level candidates. Associate level candidates can skip these topics:

Deploying Highly Available and Resilient Cloud Networks
Multi-Cloud Connectivity
Multi-Cloud Best Practices
Aviatrix Deployment Details
Deployment Hands-On Labs per Service
Network Planning

7. Design Architect Level Modules

This section includes topics that only for design architect level candidates. Associate and professional level candidates can skip these topics:

Customer Use Case Discussion and Architecture Deep-Dive
Requirement Gathering and Alignment to Business Needs
Multi-Cloud Reference Architecture Design

How much Aviatrix Certified Engineer (ACE) Exam Cost

The cost of this exam is USD 895 for associate, USD 2250 for Professional and USD 2900 for Design Architect levels. After completion of online self paced learning course, the associate exam will cost only USD 79 but the offer is valid only till 31 December 2020. Prices for Aviatrix examinations may differ for different countries. Head to the official website of Aviatrix to learn more about the exam cost.

NEW QUESTION 11
A Security policy rule displayed in italic font indicates which condition?

A. The rule is disabled.
B. The rule has been overridden.
C. The rule is a clone.
D. The rule is active.

Answer: A

NEW QUESTION 12
What are the benefits gained when the "Enable Passive DNS Monitoring" checkbox is chosen on the firewall? (Select all correct answers.)

A. Improved BrightCloud malware detection.
B. Improved malware detection in WildFire.
C. Improved PANDB malware detection.
D. Improved DNSbased C&C signatures.

Answer: B,C,D

NEW QUESTION 13
If there is an HA configuration mismatch between firewalls during peer negotiation, whichstate will the passive firewallenter?

A. NON*FUNCTIONAL
B. PASSIVE
C. ACTIVE
D. INITIAL

Answer: A

NEW QUESTION 14
Which AWS feature does Aviatrix integrate with to provide Public Subnet Filtering for Ingress Internet Traffic to a VPC?

A. AWS WAF
B. AWS GuardDuty
C. AWS inspector
D. AWS Shield

Answer: A

NEW QUESTION 15
All of the interfaces on a Palo Alto Networks device must be of the same interface type.

A. False
B. True

Answer: A

NEW QUESTION 16
Using the API in PAN-OS 6.1, WildFire subscribers can upload up to how many samples per day?

A. 0
B. 1
C. 2
D. 3

Answer: C

NEW QUESTION 17
What native methods are available to configure Public Cloud Networks using Aviatrix Controller? (Choose 3)

A. Powershell
B. Terraform
C. REST API
D. Bash
E. Ul (User Interface)

Answer: B,C,E

NEW QUESTION 18
A Config Lock may be removed by which of the following users? (Select all correct answers.)

A. Superusers
B. Device administrators
C. The administrator who set it
D. Any administrator

Answer: A,C

NEW QUESTION 19
What are the benefits gained when the "Enable Passive DNS Monitoring" checkbox is chosen on the firewall? (Select
all correct answers.)

A. Improved BrightCloud malware detection.
B. Improved malware detection in WildFire.
C. Improved PANDB malware detection.
D. Improved DNSbased C&C signatures.

Answer: B,C,D

NEW QUESTION 20
What new functionality is provided in PAN-OS 5.0 by Palo Alto Networks URL Filtering Database (PAN- DB)?

A. The "Log Container Page Only" option can be employed in a URL-Filtering policy to reduce the number of logging events.
B. IP-Based Threat Exceptions can now be driven by custom URL categories
C. URL-Filtering can now be employed as a match condition in Security policy
D. Daily database downloads for updates are no longer required as devices stay in-sync with the cloud.

Answer: D

NEW QUESTION 21
In which of the following can UserID be used to provide a match condition? (Select all correct answers.)

A. NAT Policies
B. Zone Protection Policies
C. Threat Profiles
D. Security Policies

Answer: D

NEW QUESTION 22
Wildfire may be used for identifying which of the following types of traffic?

A. DHCP
B. Malware
C. URL Content
D. DNS

Answer: B

NEW QUESTION 23
When configuring Security rules based on FQDN objects, which of the following statements are true?

A. The firewall resolves the FQDN first when the policy is committed, and is refreshed at TTL expiration. The resolution
of this FQDN stores up to 10 different IP addresses.
B. In order to create FQDN-based objects, you need to manually define a list of associated IP. Up to 10 IP addresses
can be configured for each FQDN entry.
C. The firewall resolves the FQDN first when the policy is committed, and is refreshed at TTL expiration. There is no
limit on the number of IP addresses stored for each resolved FQDN.
D. The firewall resolves the FQDN first when the policy is committed, and is refreshed each time Security rules are
evaluated.

Answer: B

NEW QUESTION 24
You have decided to implement a Virtual Wire Subinterface. Which options can be used to classify traffic?

A. VLAN tag, or VLAN tag plus IP address (IP address, IP range, or subnet).
B. Subinterface ID and VLAN tag only
C. Either VLAN tag or IP address, provided that each tag or ID is contained in the same zone.
D. By Zone and/or IP Classifier

Answer: A

NEW QUESTION 25
Choose the correct behavior around software upgrade and security patching of Aviatrix Platform. (Choose 2)

A. Security patching of the Aviatrix platform can be done without requiring version upgrade of entire platform
B. Aviatrix platform software upgrade requires long downtime
C. Aviatrix platform offers hitless upgrades
D. Security patching of the Aviatrix platform always requires a version upgrade for entire deployment

Answer: A,D

NEW QUESTION 26
AWS Public VIF for DirectConnect announces the CIDR ranges of the publicly-a...
SELECT THE CORRECT ANSWER

A. The selected publicly-available services from all AWS regions
B. All publicly-available services from the selected AWS region.
C. The selected publicly-available services from the selected AWS region
D. All publicly-available services from all AWS regions

Answer: B

NEW QUESTION 27
As ofPAN-OS 8.0, when configuring a Decryption Policy Rule, which of the following is NOT an available option as matching criteria in the rule?

A. Service
B. Source User
C. URL Category
D. Application
E. Source Zone

Answer: D

NEW QUESTION 28
Which statement accurately reflects the functionality of using regions as objects in Security policies?

A. Regions cannot be used in the "Source User" field of the Security Policies, unless the administrator has set up custom regions.
B. The administrator can set up custom regions, including latitude and longitude, to specify the geographic position of that particular region. Both predefined regions and custom regions can be used in the "Source User" field.
C. The administrator can set up custom regions, including latitude and longitude, to specify the geographic position of that particular region. These custom regions can be used in the
"Source User" field of the Security Policies.
D. Predefined regions are provided for countries, not but not for cities. The administrator can set up custom regions, including latitude and longitude, to specify the geographic position of that particular region.

Answer: D

NEW QUESTION 29
As of PAN-OS 7.0, when configuring a Decryption Policy Rule, which of the following is NOT an available option as matching criteria in the rule?

A. Service
B. Source User
C. URL Category
D. Application
E. Source Zone

Answer: D

Explanation:
Explanation/Reference:

NEW QUESTION 30
As per the cloud architecture best practices guidelines in Multi-Cloud Network Architecture (MCNA), which component provides a consistent transit available in all regions across all public cloud providers.

A. Cloud Security Layer
B. Cloud Operations Layer
C. Cloud Applications Layer
D. Global Transit Layer

Answer: C

NEW QUESTION 31
When configuring Security rules based on FQDN objects, which of the following statements are true?

A. The firewall resolves the FQDN first when the policy is committed, and is refreshed each time Security rules are evaluated.
B. The firewall resolves the FQDN first when the policy is committed, and is refreshed at TTL expiration. There is no limit on the number of IP addresses stored for each resolved FQDN.
C. In order to create FQDN-based objects, you need to manually define a list of associated IP. Up to 10 IP addresses can be configured for each FQDN entry.
D. The firewall resolves the FQDN first when the policy is committed, and is refreshed at TTL expiration. The resolution of this FQDN stores up to 10 different IP addresses.

Answer: C

NEW QUESTION 32
An interface in tap mode can transmit packets on the wire.