156-215.81.20 practice questions 161–170

1. Question 161 · 172 in bank

   What is NOT an advantage of Stateful Inspection?

   • AHigh Performance
   • BNo Screening above Network Layer
   • CGood Security
   • DTransparency

   Show answer

   Answer: B

   Next question

2. Question 162 · 172 in bank

   From the GAiA Portal, which of the following operations CANNOT be performed on a Security Management Server?

   • AAdd a static route
   • BView Security Management GUI Clients
   • CVerify a Security Policy
   • DOpen a terminal shell

   Show answer

   Answer: C

   Next question

3. Question 163 · 172 in bank

   AdminA and AdminB are both logged into SmartConsole. What does it mean if AdminB sees a lock icon on a rule? (Choose the best answer.)

   • ARule is locked by AdminA and will be made available if the session is published.
   • BRule is locked by AdminA and if the session is saved, the rule will be made available.
   • CRule is locked by AdminB because the save button has not been pressed.
   • DRule is locked by AdminB because the rule is currently being edited.

   Show answer

   Answer: A

   Next question

4. Question 164 · 172 in bank

   Which of the following is true about Stateful Inspection?

   • AStateful Inspection looks at both the headers of packets, as well as examining their content.
   • BStateful Inspection requires two rules, one for outgoing traffic and one for incoming traffic.
   • CStateful Inspection requires that a server reply to a request, in order to track a connection’s state.
   • DStateful Inspection tracks state using two tables, one for incoming traffic and one for outgoing traffic.

   Show answer

   Answer: A

   Next question

5. Question 165 · 172 in bank

   Aggressive Mode in iKEv1 uses how many packages for negotiation?

   • A3
   • Bdepends on the make of the peer gateway
   • C6
   • D5

   Show answer

   Answer: A

   Next question

6. Question 166 · 172 in bank

   Bob and Joe both have Administrator Roles on their Gaia Platform. Bob logs in on the WebUI and then Joe logs in through CLI. Choose what BEST describes the following scenario, where Bob and Joe are both logged in:

   • ASince they both are logged in on different interfaces, they will both be able to make changes.
   • BThe database will be locked by Bob and Joe will not be able to make any changes.
   • CBob will receive a prompt that Joe has logged in.
   • DWhen Joe logs in. Bob will be logged out automatically.

   Show answer

   Answer: B

   Next question

7. Question 167 · 172 in bank

   What does the 'unknown' SIC status shown on SmartConsole mean?

   • AThe management can contact the Security Gateway but cannot establish Secure Internal Communication
   • BAdministrator input the wrong SIC key
   • CSIC activation key requires a reset
   • DThere is no connection between the Security Gateway and Security Management Server

   Show answer

   Answer: D

   Next question

8. Question 168 · 172 in bank

   When comparing Stateful Inspection and Packet Filtering, what is a benefit that Stateful Inspection offers over Packer Filtering?

   • AStateful Inspection offers unlimited connections because of virtual memory usage
   • BStateful Inspection does not use memory to record the protocol used by the connection
   • COnly one rule is required for each connection.
   • DStateful Inspection offers no benefits over Packet Filtering.

   Show answer

   Answer: C

   Next question

9. Question 169 · 172 in bank

   A stateful inspection firewall works by registering connection data and compares traffic to this information. Where is the information stored?

   • AIt is stored in the OS sessions table.
   • BIt is stored using state tables.
   • CIt is stored in the system SMEM memory pool.
   • DIt is stored in a CSV file on the security gateway hard drive located in "$FWDIR/conf/…".

   Show answer

   Answer: B

   Next question

10. Question 170 · 172 in bank

    You have discovered suspicious activity in your network. What is the BEST immediate action to take?

    • AWait until traffic has been identified before making any changes.
    • BContact your ISP to request them to block the traffic.
    • CCreate a Suspicious Activity Monitoring (SAM) rule to block that traffic.
    • DCreate a new policy rule to block the traffic.

    Show answer

    Answer: C

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

156-215.81.20 practice, question 161. 172 questions available.