HP2-W100 Online Practice Questions and Answers

In a Routed Deployment with NAT configuration, which entry must be configured to hide private network addresses?

A. Destination NAT

B. Source NAT

C. Base NAT

D. Target NAT

Which group of filters is static?

A. Games, Music, Video, RD

B. Games, P2P, Remote Access, Tunneling

C. Games, P2P Music, Flash

D. Games, Music, Video, Tunneling

Refer to the exhibit.

Which traffic is permitted to the Internal zone without any firewall rules configured?

A. All HTTP traffic input to the Internal zone is permitted.

B. Any IP traffic input to the Internal zone destined to any other interfaces is permitted.

C. Any IP traffic input to the Internal zone is permitted.

D. Some of the IP traffic input to the Internal zone is permitted.

Which statements are true regarding applications? (Select two)

A. Applications can evade traditional security mechanisms by tunneling within other commonly used services (e.g., http, https).

B. Applications do not pose a threat to network security.

C. Applications can evade traditional security mechanisms by randomly shifting their communications ports and protocols.

D. TippingPoint only inspects some applications.

E. TippingPoint does not inspect applications.

F. Applications pose a minimal threat to network security

Which Security Zone Property identifies members so that you can apply policies to them?

A. TCP-RST

B. Inspection Policies

C. Named Resources

D. Inspection Profiles

How often are digital vaccines released? (Select two.)

A. Yearly

B. Daily

C. Immediately for critical vulnerabilities and threats (ZDI)

D. Monthly

E. Bi-annually to meet the needs of users and address critical threats

F. Weekly

Under which circumstance can traffic pass between security zones?

A. Traffic can always pass between security zones.

B. When an explicit policy allowing traffic between security zones is defined.

C. When you create application groups.

D. By default, traffic can pass between security zones.

Which CLI command can be used to review packet statistics?

A. Show np engine statistics

B. Show np engine details

C. Show np packet details

D. Show np engine filter

Which HP TippingPoint NGFW S-Series products offer 32GB of external storage? (Select two.)

A. S1000F

B. S8005F

C. S8010F

D. S1020F

E. S3020F

Due to security issues, the company HR website needs to function on non-standard port 272.

Where this should be configured in the LSM?

A. On the Firewall > Services > Policy, check the box next to http, then click Edit. Add 272 to the service, click OK and then Commit Changes.

B. On the Firewall > Policy > Services, check the box next to https, then click Edit. Add 272 to the service, click OK and then Commit Changes.

C. On the Firewall > Policy > Services, check the box next to http, then click Edit. Add 80 to the service, click OK and then Commit Changes.

D. On the Firewall > Policy > Services, check the box next to http, then click Edit. Add 272 to the service, click OK and then Commit Changes.

What is the direction flow of firewall policies?

A. Policies are applied to outbound traffic only

B. Policies are applied to inbound traffic only

C. Policies are one-way.

D. Policies are both directions

Which tasks can be scheduled on an HP TippingPoint SMS? (Select three.)

A. DV distribution

B. Reports

C. Profile distribution

D. System snapshots

E. Profile activation

F. DV Activation

Which action sets are available by default to be applied to traffic within a security profile? (Select three)

A. Priority

B. Block

C. Rate Limit

D. Permit + Notify

E. Trace

F. Pass

What must be done before configuring firewall rules and inspection filters?

A. Creating Application Groups

B. Authenticating servers

C. Setting up Security Zones

D. Implementing directional-based policies

Refer to the exhibit.

Which port on the HP TippingPoint NGFW 3020F front panel is the Dedicated HA port?

A. 1

B. 2

C. 3

D. 4