156-215.80 Online Practice Questions and Answers

SmartEvent does NOT use which of the following procedures to identity events:

A. Matching a log against each event definition

B. Create an event candidate

C. Matching a log against local exclusions

D. Matching a log against global exclusions

In Logging and Monitoring, the tracking options are Log, Detailed Log and Extended Log. Which of the following options can you add to each Log, Detailed Log and Extended Log?

A. Accounting

B. Suppression

C. Accounting/Suppression

D. Accounting/Extended

Fill in the blank: When tunnel test packets no longer invoke a response, SmartView Monitor displays _____________ for the given VPN tunnel.

A. Down

B. No Response

C. Inactive

D. Failed

The SIC Status "Unknown" means

A. There is connection between the gateway and Security Management Server but it is not trusted.

B. The secure communication is established.

C. There is no connection between the gateway and Security Management Server.

D. The Security Management Server can contact the gateway, but cannot establish SIC.

Which of the following methods can be used to update the trusted log server regarding the policy and configuration changes performed on the Security Management Server?

A. Save Policy

B. Install Database

C. Save session

D. Install Policy

Fill in the blank: Permanent VPN tunnels can be set on all tunnels in the community, on all tunnels for specific gateways, or__________.

A. On all satellite gateway to satellite gateway tunnels

B. On specific tunnels for specific gateways

C. On specific tunnels in the community

D. On specific satellite gateway to central gateway tunnels

When using LDAP as an authentication method for Identity Awareness, the query:

A. Requires client and server side software.

B. Prompts the user to enter credentials.

C. Requires administrators to specifically allow LDAP traffic to and from the LDAP Server and the Security Gateway.

D. Is transparent, requiring no client or server side software, or client intervention.

What is the Manual Client Authentication TELNET port?

A. 23

B. 264

C. 900

D. 259

Which of the following is NOT a valid option when configuring access for Captive Portal?

A. From the Internet

B. Through internal interfaces

C. Through all interfaces

D. According to the Firewall Policy

You are about to test some rule and object changes suggested in an R77 news group. Which backup solution should you use to ensure the easiest restoration of your Security Policy to its previous configuration after testing the changes?

A. Manual copies of the directory $FWDIR/conf

B. upgrade_export command

C. Database Revision Control

D. GAiA backup utilities

Which of the following Automatically Generated Rules NAT rules have the lowest implementation priority?

A. Machine Hide NAT

B. Address Range Hide NAT

C. Network Hide NAT

D. Machine Static NAT

In R80 spoofing is defined as a method of:

A. Disguising an illegal IP address behind an authorized IP address through Port Address Translation.

B. Hiding your firewall from unauthorized users.

C. Detecting people using false or wrong authentication logins

D. Making packets appear as if they come from an authorized IP address.

Fill in the blank: An Endpoint identity agent uses a ___________ for user authentication.

A. Shared secret

B. Token

C. Username/password or Kerberos Ticket

D. Certificate

You have created a rule at the top of your Rule Base to permit Guest Wireless access to the Internet. However, when guest users attempt to reach the Internet, they are not seeing the splash page to accept your Terms of Service, and cannot access the Internet. How can you fix this?

A. Right click Accept in the rule, select "More", and then check "Enable Identity Captive Portal"

B. On the firewall object, Legacy Authentication screen, check "Enable Identity Captive Portal"

C. In the Captive Portal screen of Global Properties, check "Enable Identity Captive Portal"

D. On the Security Management Server object, check the box "Identity Logging"

Which of the following technologies extracts detailed information from packets and stores that information in state tables?

A. INSPECT Engine

B. Next-Generation Firewall

C. Packet Filtering

D. Application Layer Firewall