Accredited Configuration Engineer

Here you have the best Palo Alto Networks ACE practice exam questions

You have 172 total questions across 35 pages (5 per page)
These questions were last updated on February 4, 2026
This site is not affiliated with or endorsed by Palo Alto Networks.

Question 1 of 172

In a Destination NAT configuration, the Translated Address field may be populated with either an IP address or an Address Object.

A.

True

B.

False

Suggested Answer: A

Community votes

No votes yet

Question 2 of 172

Color-coded tags can be used on all of the items listed below EXCEPT:

A.

Address Objects

B.

Zones

C.

Service Groups

D.

Vulnerability Profiles

Suggested Answer: D

Community votes

No votes yet

Question 3 of 172

Which of the following can provide information to a Palo Alto Networks firewall for the purposes of UserID?

A.

Domain Controller

B.

SSL Certificates

C.

RIPv2

D.

Network Access Control (NAC) device

Suggested Answer: A, B, D

Community votes

No votes yet

Question 4 of 172

When you have created a Security Policy Rule that allows Facebook, what must you do to block all other web browsing traffic?

A.

Create an additional rule that blocks all other traffic.

B.

When creating the policy, ensure that webbrowsing is included in the same rule.

C.

Ensure that the Service column is defined as "applicationdefault" for this Security policy. Doing this will automatically include the implicit webbrowsing application dependency.

D.

Nothing. You can depend on PANOS to block the webbrowsing traffic that is not needed for Facebook use.

Suggested Answer: D

Community votes

No votes yet

Question 5 of 172

As the Palo Alto Networks Administrator responsible for UserID, you need to enable mapping of network users that do not sign in using LDAP. Which information source would allow for reliable UserID mapping while requiring the least effort to configure?

A.

Active Directory Security Logs

B.

WMI Query

C.

Captive Portal

D.

Exchange CAS Security logs

Suggested Answer: A

Community votes

No votes yet

About the Palo Alto Networks ACE Certification Exam

About the Exam

The Palo Alto Networks ACE (Accredited Configuration Engineer) validates your knowledge and skills. Passing demonstrates proficiency and can boost your career prospects in the field.

How to Prepare

Work through all 172 practice questions across 35 pages. Focus on understanding the reasoning behind each answer rather than memorizing responses to be ready for any variation on the real exam.

Why Practice Exams?

Practice exams help you familiarize yourself with the question format, manage your time, and reduce anxiety on the test day. Our ACE questions are regularly updated to reflect the latest exam objectives.