156-215.80 practice questions 201–210

1. Question 201 · 380 in bank

   What is the command to see cluster status in cli expert mode?

   • Afw ctl stat
   • BclusterXL stat
   • CclusterXL status
   • Dcphaprob stat

   Show answer

   Answer: A

   Next question

2. Question 202 · 380 in bank

   On R80.10 when configuring Third-Party devices to read the logs using the LEA (Log Export API) the default Log Server uses port:

   • A18210
   • B18184
   • C257
   • D18191

   Show answer

   Answer: B

   Next question

3. Question 203 · 380 in bank

   If the first packet of an UDP session is rejected by a security policy, what does the firewall send to the client?

   • ANothing
   • BTCP FIN
   • CTCP RST
   • DICMP unreachable

   Show answer

   Answer: A

   Next question

4. Question 204 · 380 in bank

   What is the mechanism behind Threat Extraction?

   • AThis is a new mechanism which extracts malicious files from a document to use it as a counter-attack against its sender
   • BThis is a new mechanism which is able to collect malicious files out of any kind of file types to destroy it prior to sending it to the intended recipient
   • CThis is a new mechanism to identify the IP address of the sender of malicious codes and to put it into the SAM database (Suspicious Activity Monitoring).
   • DAny active contents of a document, such as JavaScripts, macros and links will be removed from the document and forwarded to the intended recipient, which makes this solution very fast

   Show answer

   Answer: D

   Next question

5. Question 205 · 380 in bank

   What is the benefit of Manual NAT over Automatic NAT?

   • AIf you create a new Security Policy, the Manual NAT rules will be transferred to this new policy
   • BThere is no benefit since Automatic NAT has in any case higher priority over Manual NAT
   • CYou have the full control about the priority of the NAT rules
   • DOn IPSO and GAIA Gateways, it is handled in a Stateful manner

   Show answer

   Answer: C

   Next question

6. Question 206 · 380 in bank

   The CPD daemon is a Firewall Kernel Process that does NOT do which of the following?

   • ASecure Internal Communication (SIC)
   • BRestart Daemons if they fail
   • CTransfer messages between Firewall processes
   • DPulls application monitoring status

   Show answer

   Answer: D

   Next question

7. Question 207 · 380 in bank

   Which of the following is NOT an attribute of packer acceleration?

   • ASource address
   • BProtocol
   • CDestination port
   • DApplication Awareness

   Show answer

   Answer: D

   Next question

8. Question 208 · 380 in bank

   Which is a suitable command to check whether Drop Templates are activated or not?

   • Afw ctl get int activate_drop_templates
   • Bfwaccel stat
   • Cfwaccel stats
   • Dfw ctl templates ג€"d

   Show answer

   Answer: B

   Next question

9. Question 209 · 380 in bank

   Please choose correct command syntax to add an `emailserver1` host with IP address 10.50.23.90 using GAiA management CLI?

   • Ahost name myHost12 ip-address 10.50.23.90
   • Bmgmt add host name ip-address 10.50.23.90
   • Cadd host name emailserver1 ip-address 10.50.23.90
   • Dmgmt add host name emailserver1 ip-address 10.50.23.90

   Show answer

   Answer: C

   Next question

10. Question 210 · 380 in bank

    The CDT utility supports which of the following?

    • AMajor version upgrades to R77.30
    • BOnly Jumbo HFA's and hotfixes
    • COnly major version upgrades to R80.10
    • DAll upgrades

    Show answer

    Answer: D

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

156-215.80 practice, question 201. 380 questions available.