156-315.81.20 practice questions 41–50

1. Question 41 · 193 in bank

   What are the two types of tests when using the Compliance blade?

   • ATests conducted based on the IoC XML file and analysis of SOLR documents
   • BAccess Control policy analysis and Threat Prevention policy analysis
   • CPolicy-based tests and Global properties
   • DGlobal tests and Object-based tests

   Show answer

   Answer: D

   Next question

2. Question 42 · 193 in bank

   Which of the following statements about SecureXL NAT Templates is true?

   • ANAT Templates are generated to achieve high session rate for NAT. These templates store the NAT attributes of connections matched by rulebase so that similar new connections can take advantage of this information and do NAT without the expensive rulebase lookup. These are disabled by default and work only if Accept Templates are disabled.
   • BNAT Templates are generated to achieve high session rate for NAT. These templates store the NAT attributes of connections matched by rulebase so that similar new connections can take advantage of this information and do NAT without the expensive rulebase lookup. These are enabled by default and work only if Accept Templates are enabled.
   • CACCEPT Templates are generated to achieve high session rate for NAT. These templates store the NAT attributes of connections matched by rulebase so that similar new connections can take advantage of this information and do NAT without the expensive rulebase lookup. These are disabled by default and work only if NAT Templates are disabled.
   • DDROP Templates are generated to achieve high session rate for NAT. These templates store the NAT attributes of connections matched by rulebase so that similar new connections can take advantage of this information and do NAT without the expensive rulebase lookup. These are disabled by default and work only if NAT Templates are disabled.

   Show answer

   Answer: B

   Next question

3. Question 43 · 193 in bank

   In what way is Secure Network Distributor (SND) a relevant feature of the Security Gateway?

   • ASND is used to distribute packets among Firewall instances
   • BSND is a feature to accelerate multiple SSL VPN connections
   • CSND is a feature of fw monitor to capture accelerated packets
   • DSND is an alternative to IPSec Main Mode, using only 3 packets.

   Show answer

   Answer: A

   Next question

4. Question 44 · 193 in bank

   Which statement is most correct regarding about “CoreXL Dynamic Dispatcher’?

   • AThe CoreXL FW instances assignment mechanism is based on IP Protocol type.
   • BThe CoreXL FW instances assignment mechanism is based on the utilization of CPU cores
   • CThe CoreXL FW instances assignment mechanism is based on Source MAC addresses, Destination MAC addresses
   • DThe CoreXL FW instances assignment mechanism is based on Source IP addresses, Destination IP addresses, and the IP ‘Protocol’ type.

   Show answer

   Answer: B

   Next question

5. Question 45 · 193 in bank

   What kind of information would you expect to see when using the “sim affinity –I” command?

   • AOverview over SecureXL templated connections
   • BThe VMACs used in a Security Gateway cluster
   • CAffinity Distribution
   • DThe involved firewall kernel modules in inbound and outbound packet chain

   Show answer

   Answer: C

   Next question

6. Question 46 · 193 in bank

   CoreXL is NOT supported when one of the following features is enabled:

   • AOverlapping NAT
   • BRoute-based VPN
   • CIPv6
   • DIPS

   Show answer

   Answer: A

   Next question

7. Question 47 · 193 in bank

   What are the three SecureXL Templates available in R81.10?

   • AAccept Templates, Drop Templates, NAT Templates
   • BPEP Templates, QoS Templates, VPN Templates
   • CAccept Templates, PDP Templates, PEP Templates
   • DAccept Templates, Drop Templates, Reject Templates

   Show answer

   Answer: A

   Next question

8. Question 48 · 193 in bank

   What is the correct description for the Dynamic Balancing / Spit feature?

   • ADynamic Balancing / Split dynamically change the number of SND's and firewall instances based on the current load. It is only available on Quantum Appliances (not on Quantum Spark or Open Server)
   • BDynamic Balancing / Split dynamically distribute the traffic from one network interface to multiple SND’s. The interface must support Multi-Queue. It is only available on Quantum Appliances (not on Quantum Spark or Open Server)
   • CDynamic Balancing / Split dynamically change the number of SND’s and firewall instances based on the current load. It is only available on Quantum Appliances and Open Server (not on Quantum Spark)
   • DDynamic Balancing / Spit dynamically distribute the traffic from one network interface to multiple SND’s. The interface must support Multi-Queue. It is only available on Quantum Appliances and Open Server (not on Quantum Spark)

   Show answer

   Answer: A

   Next question

9. Question 49 · 193 in bank

   Which statement is WRONG regarding the usage of the Central Deployment in SmartConsole?

   • AOnly Hotfixes can be installed with the Central Deployment in SmartConsole
   • BYou can install Hotfixes with the Central Deployment in SmartConsole
   • CYou can upgrade your cluster without user intervention with the Central Deployment in SmartConsole from R80.40 to R81.20.
   • DYou can install Jumbo Hotfix accumulators with the Central Deployment in SmartConsole.

   Show answer

   Answer: A

   Next question

10. Question 50 · 193 in bank

    What is false regarding prerequisites for the Central Deployment usage?

    • AThe Security Gateway must have a policy installed
    • BThe administrator must have write permission on SmartUpdate
    • CNo need to establish SIC between gateways and the management server, since the CDT tool will take care about SIC automatically
    • DSecurity Gateway must have the latest CPUSE Deployment Agent

    Show answer

    Answer: C

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

156-315.81.20 practice, question 41. 193 questions available.