Accredited Configuration Engineer

Here you have the best Palo Alto Networks ACE practice exam questions

  • You have 172 total questions to study from
  • Each page has 5 questions, making a total of 35 pages
  • You can navigate through the pages using the buttons at the bottom
  • This questions were last updated on October 22, 2025
  • This site is not affiliated with or endorsed by Palo Alto Networks.
Question 1 of 172
In a Destination NAT configuration, the Translated Address field may be populated with either an IP address or an Address Object.
    Correct Answer: A

Question 2 of 172
Color-coded tags can be used on all of the items listed below EXCEPT:
    Correct Answer: D

Question 3 of 172
Which of the following can provide information to a Palo Alto Networks firewall for the purposes of UserID?
    Correct Answer: A, B, D

Question 4 of 172
When you have created a Security Policy Rule that allows Facebook, what must you do to block all other web browsing traffic?
    Correct Answer: D

Question 5 of 172
As the Palo Alto Networks Administrator responsible for UserID, you need to enable mapping of network users that do not sign in using LDAP. Which information source would allow for reliable UserID mapping while requiring the least effort to configure?
    Correct Answer: A