Aviatrix ACE Test Engine Practice Test Questions, Exam Dumps
100% Free ACE Daily Practice Exam With 63 Questions
For more info read reference:
Aviatrix Website Training Portal FAQs and Guide
Topics of Aviatrix Certified Engineer (ACE) Exam
The Aviatrix Certified Engineer (ACE) Exam is further divided into 3 levels i.e. for Associates, professionals and design architects. Exam contents for each level certification vary. These core topics listed below are general recommendations for the material that is likely to be used for each examination level.
The updated syllabus effective for the Aviatrix Certified Engineer (ACE) Exam is listed below in detail of each section and their topics:
1. Cloud Networking Overview
This sections is comprised of the following subsections:
- Networking Principles in the Cloud
- Cloud Native Networking 101 (AWS, Azure, GCP, OCI)
2. Multi-Cloud Networking Architecture (MCNA)
This sections is comprised of the following subsections:
- Customer Problems/Pain Points
- Cloud Native Networking Challenges and Limitations
- MCNA Details (Cloud Core, Access, Operations, Security)
3. Aviatrix Platform Overview
This sections is comprised of the following subsections:
- Aviatrix Solution Components
4. Aviatrix Platform Features
This sections is comprised of the following subsections:
- Cloud Access (User VPN, S2C, CloudWAN, etc.)
- Cloud Operations and Troubleshooting
- Cloud Security (HPE, FireNet, Private S3, Ingress/Egress, etc.)
- Cloud Core (Transit Networking, etc.)
- Extreme Cloud Visibility (Aviatrix CoPilot)
5. Customer Deployment Case-Study
6. Professional Level Modules
This section includes topics that are for both professional level and design architect level candidates. Associate level candidates can skip these topics:
- Real World Design Exercises
- Design Decisions and Tips
- Aviatrix Deployment Details
- Network Planning
- Deploying Highly Available and Resilient Cloud Networks
- Multi-Cloud Best Practices
- Multi-Cloud Connectivity
- Deployment Hands-On Labs per Service
7. Design Architect Level Modules
This section includes topics that only for design architect level candidates. Associate and professional level candidates can skip these topics:
- Technical Project Planning
- Customer Use Case Discussion and Architecture Deep-Dive
- Requirement Gathering and Alignment to Business Needs
- Multi-Cloud Reference Architecture Design
- Design Pillars (Availability, Manageability, Performance, Cost)
- Instructor Evaluation
NEW QUESTION 17
Palo Alto Networks firewalls support the use of both Dynamic (built-in user roles) and Role-Based (customized user
roles)
- A. True
- B. False
Answer: A
NEW QUESTION 18
Choose the correct behavior around software upgrade and security patching of Aviatrix Platform. (Choose 2)
- A. Security patching of the Aviatrix platform can be done without requiring version upgrade of entire platform
- B. Aviatrix platform offers hitless upgrades
- C. Security patching of the Aviatrix platform always requires a version upgrade for entire deployment
- D. Aviatrix platform software upgrade requires long downtime
Answer: A,C
NEW QUESTION 19
What new functionality is provided in PAN-OS 5.0 by Palo Alto Networks URL Filtering Database (PAN-DB)?
- A. URL-Filtering can now be employed as a match condition in Security policy
- B. Daily database downloads for updates are no longer required as devices stay in-sync with the cloud.
- C. The "Log Container Page Only" option can be employed in a URL-Filtering policy to reduce the number of logging
events. - D. IP-Based Threat Exceptions can now be driven by custom URL categories
Answer: B
NEW QUESTION 20
In PAN-OS8.0, rule numbers were introduced. Rule Numbers are:
- A. Static numbers that must be manually re-numbered whenever a new security policy is added
- B. Numbers referring to when the security policy was created and do not have a bearing on the order of policy enforcement
- C. Dynamic numbers that refer to a security policy's order and are especially useful when filtering security policies by tags
Answer: C
NEW QUESTION 21
Which feature is a dynamic grouping of applications used in Security policy rules?
- A. application filter
- B. implicit applications
- C. application group
- D. dependent applications
Answer: C
NEW QUESTION 22
Customers do not need to sign a separate licensing agreement with Aviatrix to get started because controller can be launched from any cloud provider's Marketplace (Pay-As-You-Go metering).
- A. True
- B. False
Answer: B
NEW QUESTION 23
As a Cloud Networking Consultant, you are reviewing a Microsoft Azure network design that will be using Microsoft Azure ExpressRoute Edge routers as transit for inter-VNet communication. What are some known challenges with this design pattern?
- A. Multiple customers using same edge router may create noisy neighbor issues
- B. All of the above
- C. Lack of visibility into traffic at the edge routers
- D. No granular control to be able to route VNets selectively
Answer: B
NEW QUESTION 24
Taking into account only the information in the screenshot above, answer the following question. Which applications will be allowed on their standard ports? (Select all correct answers.)
- A. SSH
- B. BitTorrent
- C. Gnutella
- D. Skype
Answer: A,B
NEW QUESTION 25
Can the Aviatrix platform help you interconnect VPCs/VNets/VCNs with overlapping IP address ranges?
- A. No
- B. Yes, using S2C (Site-to-Cloud)
- C. Yes, using FiightPath
- D. Yes, using standard encrypted peering
Answer: B
NEW QUESTION 26
ACE Inc. has a Direct Connect for their on-premise location to connect to AWS. Security team has recently been notified of issues where employees and contractors working from the on-premise location are using non-corporate (personal or public) S3 buckets using ACE Inc.'s Direct Connect. This is overwhelming the Direct Connect and also showing the source of traffic to these S3 buckets as ACE Inc. which has potential compliance and security risks.
As a cloud architect, you are tasked with securing the Direct Connect for specific ACE Inc. corporate S3 buckets access only. Which Aviatrix feature can help ACE Inc. overcome this problem?
- A. Aviatrix FlightPath
- B. Aviatrix Private S3
- C. Aviatrix CoPilot
- D. Aviatrix Multi-Account Onboarding
Answer: D
NEW QUESTION 27
Using native AWS constructs, the highest available bandwidth within an IPSEC tunnel is:
- A. 1.25Gbps
- B. 500Mbps
- C. 4Gbps
- D. 10Gbps
Answer: A
NEW QUESTION 28
Where is the 'center of gravity' in the new computing model?
- A. Provider
- B. Public Cloud
- C. On Prem
- D. Private Cloud
Answer: B
NEW QUESTION 29
When creating an application filter, which of the following is true?
- A. Excessive bandwidth may be used as a filter match criteria
- B. They are called dynamic because they will automatically include new applications from an application signature
update if the new application's type is included in the filter - C. They are called dynamic because they automatically adapt to new IP addresses
- D. They are used by malware
Answer: B
NEW QUESTION 30
As per the cloud architecture best practices guidelines in Multi-Cloud Network Architecture (MCNA), which component provides a consistent transit available in all regions across all public cloud providers.
- A. Global Transit Layer
- B. Cloud Operations Layer
- C. Cloud Security Layer
- D. Cloud Applications Layer
Answer: D
NEW QUESTION 31
In an HA configuration, which three functions are associated with the HA1 Control Link?
(Choose three.)
- A. synchronizing configuration
- B. exchanging heartbeats
- C. exchanging hellos
- D. synchronizing sessions
Answer: A,B,C
NEW QUESTION 32
ACE Inc. is currently using AWS Transit Gateway (TGW) with 100 VPCs attached to it from different security domains.
These 100 VPCs are used as following:
* 20 VPCs belong to Production,
* 40 VPCs belong to Development,
* 20 are part of UAT and
* 20 VPCs are for shared services and miscellanous common needs.
ACE Inc. requirements are to:
* provide network and traffic segmentation between Prod, Development, UAT VPCs such that there is no traffic between VPCs belonging to different domains
* allow all VPCs in each domain to communicate with each other
* allow every VPC access to shared services VPCs
Which Aviatrix feature would help to not only provide this segmentation but also decrease the complexity of this topology and routing configuration by orchestrating life-cycle management of AWS Transit Gateways?
(Choose 2)
- A. Aviatrix TGW Orchestrator
- B. Aviatrix AWS-TGW Encrypted Peering
- C. Aviatrix Security Domain
- D. Aviatrix Slte-io-Cloud (S2C)
Answer: B,C
NEW QUESTION 33
A "Continue" action can be configured on which of the following Security Profiles?
- A. URL Filtering and Anti-virus
- B. URL Filtering only
- C. URL Filtering, File Blocking, and Data Filtering
- D. URL Filtering and File Blocking
Answer: D
NEW QUESTION 34
Operations team has noticed that during the peak working hours, Aviatrix Gateway's throughput utilization stays around 80% of the current instance size. A decision has been made to scale up the instance size to provide more throughput. Which below statement accurately describes instance sizing of Aviatrix Gateways?
- A. Aviatrix Gateways can scale up and down both
- B. Aviatrix Gateways can scale down but not scale up
- C. Aviatrix Gateways can scale up but not scale down
- D. Aviatrix Gateways instance size has to be chosen at deployment and can't change later
Answer: D
NEW QUESTION 35
Which of the following most accurately describes Dynamic IP in a Source NAT configuration?
- A. A single IP address is used, and the source port number is unchanged.
- B. The next available IP address in the configured pool is used, but the source port number is unchanged.
- C. The next available address in the configured pool is used, and the source port number is changed.
- D. A single IP address is used, and the source port number is changed.
Answer: C
NEW QUESTION 36
With IKE Phase 1, each device is identified to the other by a Peer ID. In most cases, the Peer ID is just the public IP address of the device. In situations where the public IP address is not static, the Peer ID can be a text value.
- A. True
- B. False
Answer: A
NEW QUESTION 37
......
Use Valid New ACE Test Notes & ACE Valid Exam Guide: https://www.pass4surequiz.com/ACE-exam-quiz.html
ACE exam torrent Aviatrix study guide: https://drive.google.com/open?id=1zt4lZHpX_E1faVjmSh4ieu2McDvPVYA8