156-215.80 practice questions 161–170

1. Question 161 · 380 in bank

   How do you configure an alert in SmartView Monitor?

   • AAn alert cannot be configured in SmartView Monitor.
   • BBy choosing the Gateway, and Configure Thresholds.
   • CBy right-clicking on the Gateway, and selecting Properties.
   • DBy right-clicking on the Gateway, and selecting System Information.

   Show answer

   Answer: B

   Next question

2. Question 162 · 380 in bank

   Where would an administrator enable Implied Rules logging?

   • AIn Smart Log Rules View
   • BIn SmartDashboard on each rule
   • CIn Global Properties under Firewall
   • DIn Global Properties under log and alert

   Show answer

   Answer: C

   Next question

3. Question 163 · 380 in bank

   Which of these attributes would be critical for a site-to-site VPN?

   • AScalability to accommodate user groups
   • BCentralized management
   • CStrong authentication
   • DStrong data encryption

   Show answer

   Answer: D

   Next question

4. Question 164 · 380 in bank

   You believe Phase 2 negotiations are failing while you are attempting to configure a site-to-site VPN with one of your firm's business partners. Which SmartConsole application should you use to confirm your suspicious?

   • ASmartDashboard
   • BSmartUpdate
   • CSmartView Status
   • DSmartView Tracker

   Show answer

   Answer: D

   Next question

5. Question 165 · 380 in bank

   Which of the following uses the same key to decrypt as it does to encrypt?

   • AAsymmetric encryption
   • BDynamic encryption
   • CCertificate-based encryption
   • DSymmetric encryption

   Show answer

   Answer: D

   Next question

6. Question 166 · 380 in bank

   How do you configure the Security Policy to provide uses access to the Captive Portal through an external (Internet) interface?

   • AChange the gateway settings to allow Captive Portal access via an external interface.
   • BNo action is necessary. This access is available by default.
   • CChange the Identity Awareness settings under Global Properties to allow Captive Policy access on all interfaces.
   • DChange the Identity Awareness settings under Global Properties to allow Captive Policy access for an external interface.

   Show answer

   Answer: A

   Next question

7. Question 167 · 380 in bank

   The technical-support department has a requirement to access an intranet server. When configuring a User Authentication rule to achieve this, which of the following should you remember?

   • AYou can only use the rule for Telnet, FTP, SMPT, and rlogin services.
   • BThe Security Gateway first checks if there is any rule that does not require authentication for this type of connection before invoking the Authentication Security Server.
   • COnce a user is first authenticated, the user will not be prompted for authentication again until logging out.
   • DYou can limit the authentication attempts in the User Properties' Authentication tab.

   Show answer

   Answer: B

   Next question

8. Question 168 · 380 in bank

   As a Security Administrator, you must refresh the Client Authentication authorized time-out every time a new user connection is authorized. How do you do this? Enable the Refreshable Timeout setting:

   • Ain the user object's Authentication screen.
   • Bin the Gateway object's Authentication screen.
   • Cin the Limit tab of the Client Authentication Action Properties screen.
   • Din the Global Properties Authentication screen.

   Show answer

   Answer: C

   Next question

9. Question 169 · 380 in bank

   When using GAiA, it might be necessary to temporarily change the MAC address of the interface eth 0 to 00:0C:29:12:34:56. After restarting the network the old MAC address should be active. How do you configure this change?

   • AAs expert user, issue these commands: # IP link set eth0 down # IP link set eth0 addr 00:0C:29:12:34:56 # IP link set eth0 up
   • BEdit the file /etc/sysconfig/netconf.C and put the new MAC address in the field (conf :(conns :(conn :hwaddr (ג€00:0C:29:12:34:56ג€)
   • CAs expert user, issue the command: # IP link set eth0 addr 00:0C:29:12:34:56
   • DOpen the WebUI, select Network > Connections > eth0. Place the new MAC address in the field Physical Address, and press Apply to save the settings.

   Show answer

   Answer: C

   Next question

10. Question 170 · 380 in bank

    John Adams is an HR partner in the ACME organization. ACME IT wants to limit access to HR servers to designated IP addresses to minimize malware infection and unauthorized access risks. Thus, the gateway policy permits access only from John's desktop which is assigned a static IP address 10.0.0.19. John received a laptop and wants to access the HR Web Server from anywhere in the organization. The IT department gave the laptop a static IP address, but that limits him to operating it only from his desk. The current Rule Base contains a rule that lets John Adams access the HR Web Server from his desktop with a static IP (10.0.0.19). He wants to move around the organization and continue to have access to the HR Web Server. To make this scenario work, the IT administrator: 1) Enables Identity Awareness on a gateway, selects AD Query as one of the Identity Sources installs the policy. 2) Adds an access role object to the Firewall Rule Base that lets John Adams PC access the HR Web Server from any machine and from any location. 3) Changes from static IP address to DHCP for the client PC. What should John request when he cannot access the web server from his laptop?

    • AJohn should lock and unlock his computer
    • BInvestigate this as a network connectivity issue
    • CThe access should be changed to authenticate the user instead of the PC
    • DJohn should install the Identity Awareness Agent

    Show answer

    Answer: C

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

156-215.80 practice, question 161. 380 questions available.