156-215.81 practice questions 211–220

1. Question 211 · 226 in bank

   What is the purpose of the Stealth Rule?

   • ATo make the gateway visible to the Internet.
   • BTo prevent users from directly connecting to a Security Gateway.
   • CTo reduce the amount of logs for performance issues.
   • DTo reduce the number of rules in the database.

   Show answer

   Answer: B

   Next question

2. Question 212 · 226 in bank

   Identity Awareness lets an administrator easily configure network access and auditing based on three items. Choose the correct statement.

   • ANetwork location, the identity of a user and the active directory membership.
   • BNetwork location, the identity of a user and the identity of a machine.
   • CNetwork location, the telephone number of a user and the UID of a machine.
   • DGeographical location, the identity of a user and the identity of a machine.

   Show answer

   Answer: B

   Next question

3. Question 213 · 226 in bank

   From the Gaia web interface, which of the following operations CANNOT be performed on a Security Management Server?

   • AAdd a static route
   • BVerify a Security Policy
   • COpen a terminal shell
   • DView Security Management GUI Clients

   Show answer

   Answer: B

   Next question

4. Question 214 · 226 in bank

   The SIC Status “Unknown” means:

   • AThere is no connection between the gateway and Security Management Server.
   • BThe Security Management Server can contact the gateway, but cannot establish SIC.
   • CThe secure communication is established.
   • DThere is connection between the gateway and Security Management Server but it is not trusted.

   Show answer

   Answer: A

   Next question

5. Question 215 · 226 in bank

   Fill in the blank: Once a certificate is revoked from the Security Gateway by the Security Management Server, the certificate information is __________.

   • ASent to the Security Administrator.
   • BStored on the Certificate Revocation List.
   • CSent to the Internal Certificate Authority.
   • DStored on the Security Management Server.

   Show answer

   Answer: B

   Next question

6. Question 216 · 226 in bank

   Which of the following blades is NOT subscription-based and therefore does not have to be renewed on a regular basis?

   • AAnti-Virus
   • BThreat Emulation
   • CApplication Control
   • DAdvanced Networking Blade

   Show answer

   Answer: D

   Next question

7. Question 217 · 226 in bank

   Which of the following situations would not require a new license to be generated and installed?

   • AThe IP address of the Security Management or Security Gateway has changed.
   • BThe license is upgraded
   • CThe Security Gateway is upgraded
   • DThe existing license expires

   Show answer

   Answer: C

   Next question

8. Question 218 · 226 in bank

   What does the “unknown” SIC status shown on SmartConsole mean?

   • AThe management can contact the Security Gateway but cannot establish Secure Internal Communication.
   • BSIC activation key requires a reset.
   • CAdministrator input the wrong SIC key.
   • DThere is no connection between the Security Gateway and Security Management Server.

   Show answer

   Answer: D

   Next question

9. Question 219 · 226 in bank

   Fill in the blank: A(n) __________ rule is created by an administrator and configured to allow or block traffic based on specified criteria.

   • AInline
   • BExplicit
   • CImplicit accept
   • DImplicit drop

   Show answer

   Answer: B

   Next question

10. Question 220 · 226 in bank

    Which of the following is NOT a type of Endpoint Identity Agent?

    • ATerminal
    • BLight
    • CFull
    • DCustom

    Show answer

    Answer: A

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

156-215.81 practice, question 211. 226 questions available.