156-215.77 Online Practice Questions and Answers

Where can an administrator specify the notification action to be taken by the firewall in the event that available disk space drops below 15%?

A. SmartView Monitor > Gateway Status > Threshold Settings

B. SmartView Tracker > Audit Tab > Gateway Counters

C. SmartView Monitor > Gateway Status > System Information > Thresholds

D. This can only be monitored by a user-defined script.

Your perimeter Security Gateway's external IP is 200.200.200.3. Your network diagram shows:

Required. Allow only network 192.168.10.0 and 192.168.20.0 to go out to the Internet, using

200.200.200.5.

The local network 192.168.1.0/24 needs to use 200.200.200.3 to go out to the Internet.

Assuming you enable all the settings in the NAT page of Global Properties, how could you achieve these

requirements?

A. Create network objects for 192.168.10.0/24 and 192.168.20.0/24. Enable Hide NAT on both network objects, using 200.200.200.5 as hiding IP address. Add an ARP entry for 200.200.200.3 for the MAC

address of 200.200.200.5.

B. Create an Address Range object, starting from 192.168.10.1 to 192.168.20.254. Enable Hide NAT on the NAT page of the address range object. Enter Hiding IP address 200.200.200.5. Add an ARP entry for 200.200.200.5 for the MAC address of 200.200.200.3.

C. Create a network object 192.168.0.0/16. Enable Hide NAT on the NAT page. Enter 200.200.200.5 as the hiding IP address. Add an ARP entry for 200.200.200.5 for the MAC address of 200.200.200.3.

D. Create two network objects: 192.168.10.0/24 and 192.168.20.0/24. Add the two network objects to a group object. Create a manual NAT rule like the following: Original source - group object; Destination any; Service - any; Translated source - 200.200.200.5; Destination - original; Service - original.

A host on the Internet initiates traffic to the Static NAT IP of your Web server behind the Security Gateway. With the default settings in place for NAT, the initiating packet will translate the _________.

A. destination on server side

B. source on server side

C. source on client side

D. destination on client side

Which SmartConsole tool would you use to see the last policy pushed in the audit log?

A. SmartView Tracker

B. None, SmartConsole applications only communicate with the Security Management Server.

C. SmartView Status

D. SmartView Server

Spoofing is a method of:

A. Making packets appear as if they come from an authorized IP address.

B. Detecting people using false or wrong authentication logins.

C. Disguising an illegal IP address behind an authorized IP address through Port Address Translation.

D. Hiding your firewall from unauthorized users.

Which rules are not applied on a first-match basis?

A. User Authentication

B. Client Authentication

C. Session Authentication

D. Cleanup

How granular may an administrator filter an Access Role with identity awareness? Per:

A. Specific ICA Certificate

B. AD User

C. Radius Group

D. Windows Domain

How can you reset the Security Administrator password that was created during initial Security Management Server installation on GAiA?

A. Launch SmartDashboard in the User Management screen, and edit the cpconfig administrator.

B. As expert user Type fwm -a, and provide the existing administrator's account name. Reset the Security Administrator's password.

C. Type cpm -a, and provide the existing administrator's account name. Reset the Security Administrator's password.

D. Export the user database into an ASCII file with fwm dbexport. Open this file with an editor, and delete the Password portion of the file. Then log in to the account without a password. You will be prompted to assign a new password.

Which tool CANNOT be launched from SmartUpdate R77?

A. IP Appliance Voyager

B. snapshot

C. GAiA WebUI

D. cpinfo

A third-shift Security Administrator configured and installed a new Security Policy early this morning. When you arrive, he tells you that he has been receiving complaints that Internet access is very slow. You suspect the Security Gateway virtual memory might be the problem. Which SmartConsole component would you use to verify this?

A. Eventia Analyzer

B. SmartView Tracker

C. SmartView Monitor

D. This information can only be viewed with the command fw ctl pstat from the CLI.