Free Access PaloAltoNetworks.ACE.v2024-04-27.q74 Practice Test (Page 6)

Question 21

What built-in administrator role allows all rights except for the creation of administrative accounts and virtual systems?

A.vsysadmin

B.A custom role is required for this level of access

C.superuser

D.deviceadmin

Question 22

ACE Inc. has been using a 10 Gbps ExpressRoute connection into Microsoft Azure. Security and compliance team has recently flagged this as a policy violation as company data is going unencrypted over untrusted transport. What are the encryption options available to ACE Inc. for connecting to Azure? (Choose 2)

A.Use Aviatrix High Performance Encryption over ExpressRoute to encrypt at 10 Gbps line rate

B.You can open a support ticket with Microsoft Azure to encrypt at 10 Gbps

C.Manually build IPSec tunnel from on-prem router to cloud over ExpressRoute to achieve a reduced thruput of 1.2 Gbps

D.Data over ExpressRoute is encrypted by default

Question 23

Taking into account only the information in the screenshot above, answer the following question. Which applications will be allowed on their standard ports? (Select all correct answers.)

A.Skype

B.Gnutella

C.SSH

D.BitTorrent

Question 24

A user complains that they are no longer able to access a needed work application after you have implemented
vulnerability and anti-spyware profiles. The user's application uses a unique port. What is the most efficient way to
allow the user access to this application?

A.In the Threat log, locate the event which is blocking access to the user's application and create a IP-based
exemption for this user.

B.Utilize an Application Override Rule, referencing the custom port utilzed by this application. Application Override
rules bypass all Layer 7 inspection, thereby allowing access to this application.

C.Create a custom Security rule for this user to access the required application. Do not apply vulnerability and anti-
spyware profiles to this rule.

D.In the vulnerability and anti-spyware profiles, create an application exemption for the user's application.