10 Tips For Update 156-915.80 examcollection

New Questions 7

Fill in the blank. To verify SecureXL statistics, you would use the command .

View Answer

New Questions 8

How can you check whether IP forwarding is enabled on an IP Security Appliance?

A. clish -c show routing active enable

B. cat /proc/sys/net/ipv4/ip_forward

C. echo 1 > /proc/sys/net/ipv4/ip_forward

D. ipsofwd list

View Answer

New Questions 9

When deploying multiple clustered firewalls on the same subnet, what does the firewall administrator need to configure to prevent CCP broadcasts being sent to the wrong cluster?

A. Set the fwha_mac_magic_forward parameter in the $CPDIR/boot/modules/ha_boot. conf

B. Set the fwha_mac_magic parameter in the $FWDIR/boot/fwkern.conf file

C. Set the cluster global ID using the command u201ccphaconf cluster_id set <value>u201d

D. Set the cluster global ID using the command u201cfw ctt set cluster_id <value>u201d

View Answer

New Questions 10

Which directory below contains log files?

A. /opt/CPSmartlog-R80/log

B. /opt/CPshrd-R80/log

C. /opt/CPsuite-R80/fw1/log

D. /opt/CPsuite-R80/log

View Answer

New Questions 11

Match the ClusterXL modes with their configurations. Exhibit:

A. A-2, B-3, C-4, D-1

B. A-2, B-3, C-1, D-5

C. A-3, B-5, C-1, D-4

D. A-5, B-2, C-4, D-1

View Answer

New Questions 12

Your primary Security Gateway runs on GAiA. What is the easiest way to back up your Security Gateway R80 configuration, including routing and network configuration files?

A. Copying the directories $FWDIR/conf and $FWDIR/lib to another location.

B. Using the native GAiA backup utility from command line or in the Web based user interface.

C. Using the command upgrade_export.

D. Run the pre_upgrade_verifier and save the .tgz file to the directory /temp.

View Answer

New Questions 13

You have a diskless appliance platform. How do you keep swap file wear to a minimum?

A. Issue FW-1 bases its package structure on the Security Management Server, dynamically loading when the firewall is booted.

B. The external PCMCIA-based flash extension has the swap file mapped to it, allowing easy replacement.

C. Use PRAM flash devices, eliminating the longevity.

D. A RAM drive reduces the swap file thrashing which causes fast wear on the device.

View Answer

New Questions 14

To qualify as an Identity Awareness enabled rule, which column MAY include an Access Role?

A. Source

B. Track

C. User

D. Action

View Answer

New Questions 15

You are MegaCorpu2021s Security Administrator. There are various network objects which must be NATed. Some of them use the Automatic Hide NAT method, while others use the Automatic Static NAT method. What is the rule order if both methods are used together? Give the BEST answer.

A. The Administrator decides the rule order by shifting the corresponding rules up and down.

B. The Static NAT rules have priority over the Hide NAT rules and the NAT on a node has priority over the NAT on a network or an address range.

C. The Hide NAT rules have priority over the Static NAT rules and the NAT on a node has priority over the NAT on a network or an address range.

D. The rule position depends on the time of their creation. The rules created first are placed at the top; rules created later are placed successively below the others.

View Answer

New Questions 16

You find that Users are not prompted for authentication when they access their Web servers, even though you have created an HTTP rule via User Authentication. Choose the BEST reason why.

A. You checked the cache password on desktop option in Global Properties.

B. Another rule that accepts HTTP without authentication exists in the Rule Base.

C. You have forgotten to place the User Authentication Rule before the Stealth Rule.

D. Users must use the SecuRemote Client, to use the User Authentication Rule.

View Answer