Accredited Configuration Engineer

Here you have the best Palo Alto Networks ACE practice exam questions

You have 172 total questions to study from
Each page has 5 questions, making a total of 35 pages
You can navigate through the pages using the buttons at the bottom
This questions were last updated on October 22, 2025
This site is not affiliated with or endorsed by Palo Alto Networks.

Question 1 of 172

In a Destination NAT configuration, the Translated Address field may be populated with either an IP address or an Address Object.

True

False

Correct Answer: A

Question 2 of 172

Color-coded tags can be used on all of the items listed below EXCEPT:

Address Objects

Zones

Service Groups

Vulnerability Profiles

Correct Answer: D

Question 3 of 172

Which of the following can provide information to a Palo Alto Networks firewall for the purposes of UserID?

Domain Controller

SSL Certificates

RIPv2

Network Access Control (NAC) device

Correct Answer: A, B, D

Question 4 of 172

When you have created a Security Policy Rule that allows Facebook, what must you do to block all other web browsing traffic?

Create an additional rule that blocks all other traffic.

When creating the policy, ensure that webbrowsing is included in the same rule.

Ensure that the Service column is defined as "applicationdefault" for this Security policy. Doing this will automatically include the implicit webbrowsing application dependency.

Nothing. You can depend on PANOS to block the webbrowsing traffic that is not needed for Facebook use.

Correct Answer: D

Question 5 of 172

As the Palo Alto Networks Administrator responsible for UserID, you need to enable mapping of network users that do not sign in using LDAP. Which information source would allow for reliable UserID mapping while requiring the least effort to configure?

Active Directory Security Logs

WMI Query

Captive Portal

Exchange CAS Security logs

Correct Answer: A