File Info
| Exam | Accredited Configuration Engineer |
| Number | ACE |
| File Name | Palo Alto Networks.ACE.CertDumps.2020-10-05.67q.vcex |
| Size | 686 KB |
| Posted | Oct 05, 2020 |
| Download | Palo Alto Networks.ACE.CertDumps.2020-10-05.67q.vcex |
How to open VCEX & EXAM Files?
Files with VCEX & EXAM extensions can be opened by ProfExam Simulator.
Coupon: MASTEREXAM
With discount: 20%
Demo Questions
Question 1
An operator needs to create a new VPC, VCN or VNet using Aviatrix Controller. Can the operator use Aviatrix VPC Tracker feature to validate potential CIDR/Prefix/Address space duplication across multiple clouds?
- True
- False
Correct answer: A
Question 2
Azure supports availability zone in its all regions
- True
- False
Correct answer: B
Question 3
When AWS Direct Connect, Azure ExpressRoute, Google Interconnect and OCI FastConnect are encrypted without using Aviatrix High Performance Encryption, the effective throughput is reduced to __ .
- 1.25 Gbps
- 10.25 Gbps
- 5.25 Gbps
- 525 Mbps
Correct answer: A
Question 4
Aviatrix Controller allows customers to export Netflow data from all or select Aviatrix Gateways to any Netflow collector on a custom port.
- True
- False
Correct answer: A
Question 5
ACE Inc. currently uses AWS as their primary cloud provider with a strong desire to expand to Azure and GCP. IT team has strict security and control requirements from different business units that require isolation and control from each other. The different business units want
- to own their own transit architecture
- the ability to control firewall rules for their own application
- to not share same transit with other business units but have ability to connect to other business units if needed. The architecture board has mandated that there needs to be a single design pattern that accommodates above requirements irrespective of the public cloud vendor being used.
Choose the best design option to meet above needs. Each option presents a complete solution.
- Use AWS Transit Gateway (TGW). Deploy several TGWs in each region and peer them together as needed. Use TGW VPN to build IPSec tunnels to Azure Virtual WAN and Google Cloud VPN.
- Use Azure Virtual WAN to connect all the branches, users and VNets together. Insert a centralized 3rd party firewall in Virtual WAN to control traffic. Use Azure Gateway to build IPSec tunnels to AWS Transit Gateway and Google Cloud VPN.
- Use Aviatrix repeatable transit architecture integrated with 3rd party Next Gen Firewalls. Deploy same transit architecture multiple times in a region and use same design and normalized datapath for AWS, Azure, GCP and OCI. Provide NextGen firewalls in each transit so the business units can control their own firewalls and allow connectivity in and out of their transit.
- Use GCP global routing which allows connecting all GCP VPCs. Use Google Cloud VPN to build tunnels to AWS TGW and Azure Virtual WAN.
Correct answer: A
Question 6
Aviatrix Controller provides a VPC Creator tool that allows customers to create VPC, VNETs across multiple clouds like AWS, GCP, Azure and OCI from single pane of glass.
- True
- False
Correct answer: B
Question 7
Using AWS Terraform provider, a customer created an AWS Transit Gateway with 50 VPCs attached to it.
After attaching the VPCs and spinning up some EC2 instances in them, none of the instances can communicate with each other.
What should be done to resolve the issue?
- There must be security group rules blocking traffic as AWS auto configures VPC routing tables
- Configure BGP communities in VPC such that all VPCs that need to communicate with each other have same community defined
- Create routing tables in each VPC, add CIDR for all the other VPCs rn the routing table pointing to AWS Transit Gateway
- There must be security group rules blocking traffic as BGP in VPC auto configures VPC routing tables
Correct answer: C
Question 8
Choose two statements that best describe Aviatrix UserVPN/OpenVPN service.
- Requires AWS NAT Gateway
- Is limited to one Gateway per VPC/VNET
- Can integrate with DUO for MFA
- Can integrate with Active Directory
Correct answer: CD
Question 9
Aviatrix platform has several operational features and capabilities built-in to help network engineers perform day to day operational tasks.
Below, match the Aviatrix platform feature with the operational problem it addresses.
Correct answer: To work with this question, an Exam Simulator is required.
Explanation:
Question 10
An operator needs to create a new VPC, VCN or VNet using Aviatrix Controller. Can the operator use Aviatrix VPC
Tracker feature to validate CIDR/Prefix/Address space duplication
- True
- False
Correct answer: A
