F50-506 Online Practice Questions and Answers

Which three settings can be configured for a Network Access connection? (Choose 3)

A. Client SSL Certificates.

B. Split Tunneling.

C. Gateway for Network Access connection.

D. DNS Server for Network Access connection.

E. FQDN for attached client machine for Network Access connection.

F. IP Address pool for client source address.

What are two valid Source and Destination IP Address combinations as a Network packet traverses the FirePass Server for an established Network Access connection?

Client machine IP Address - 216.34.94.17 VPN Pool Address range - 104.21.47.0 / 24 FirePass Interface Addresses - External 110.121.32.10, Internal 205.229.151.10 Application Server Address

205.229.151.20 NAPT - Off - disabled

For a Network Access connection of Client to Server, the Network Packet address combination at the _____ and _____ is: (Choose 2)

A. Client and FirePass is: Source 216.34.94.17 Destination 110.121.32.10

B. Client and FirePass is: Source 216.34.94.17 Destination 205.229.151.20

C. FirePass and Server is: Source 216.34.94.17 Destination 205.229.151.20

D. Client and FirePass is: Source 104.21.47.12 Destination 110.121.32.10

E. FirePass and Server is: Source 104.21.47.12 Destination 205.229.151.20

F. FirePass and Server is: Source 205.229.151.10 Destination 205.229.151.20

Which statement is true concerning Network connections to a FirePass 600 Controller? (Choose 1)

A. FirePass can connect users to a remote network using another vendor's IPSec Gateway.

B. FirePass can connect users to a remote network using another vendor's SSL VPN Gateway.

C. Remote clients can connect to an internal network through FirePass with an IPSec connection using FirePass client software.

D. Remote clients can connect to an internal network through FirePass with a Network Access connection using FirePass client software.

E. Remote clients can connect to an internal network through FirePass with an SSL VPN connection using other vendors client software.

Which two statements are true concerning the Split Tunnel option for a Network Access connection? (Choose 2)

A. When enabled, certain client DNS queries can be directed to a different DNS Server.

B. When enabled, only traffic destined to a particular Application Server is forwarded to the FirePass server.

C. When enabled, only traffic destined from the client to a particular IP Address range is forwarded to the FirePass server.

D. When enabled, all client network traffic is split out and setup in an encrypted tunnel session with the FirePass server.

E. When enabled, traffic destined to a particular Application Server is split out and setup in an encrypted tunnel session with the FirePass server.

Which three statements are true concerning the Network Access client download process? (Choose 3)

A. The user cannot un-install the Network Access client software.

B. For Windows clients Network Access installs a new connection document.

C. For IE browsers on Windows clients, a set of ActiveX controls are installed on the client machine.

D. For Linux and MAC OSX clients, a specific client component is self-installed and self-configured for each platform.

E. For all clients, a Java client is installed on the client machine regardless of client OS.

Which two statements are true about the IP Address Pool for Network Access? (Choose 2)

A. Only two IP Address Pools may be configured on the FirePass Controller.

B. Different user Groups can be configured to use different IP Address pools.

C. The IP Address range for the Pool must include all of the configured FirePass interface Addresses.

D. The IP Address range for the Pool must include one of the configured FirePass interface Addresses.

E. IP Address range for the Pool must not include any of the configured FirePass interface Addresses.

F. The IP Address pool is the list of Addresses handed to clients attaching using the Network Access adaptor.

Which are true statements concerning FirePass 600 users? (Choose 2)

A. The FirePass Admin can delete users authorized by either the FirePass Internal database or Active Directory.

B. The FirePass Admin cannot delete Windows Domain Server users from FirePass.

C. FirePass users can be added from a RADIUS Server either through an Import or Signup template.

D. FirePass users can be added from a VASCO server either through an Import or Signup template.

E. FirePass users can be added from an Active Directory database either through an Import or Signup template.

Which of the following statements are true about the different FirePass hardware models? (Choose 3)

A. The FirePass 1000 model will support 250 concurrent users on one box.

B. The FirePass 4000 model will support 250 concurrent users on one box.

C. The FirePass 1000 model will support three 10/100 Ethernet ports.

D. The FirePass 600 model will support 25 concurrent users if a license is purchased.

E. The FirePass 600 model will support 2500 concurrent users on two boxes in a Cluster configuration.

F. The FirePass 600 model will support three 10/100 Ethernet ports.

From which sources can users be Imported to FirePass 600? (Choose 2)

A. Radius Server.

B. VASCO Server.

C. Active Directory.

D. Windows Domain Server.

E. UNIX style password file.

Which two statements are true about FirePass 600 Signup templates? (Choose 2)

A. Network Access users must use Signup templates to logon to FirePass.

B. Adding Users to FirePass can be automated by using Signup templates.

C. Signup templates only work for Users authenticated by an External Server.

D. Users can use Signup templates to add additional Client support.

E. Signup templates only work for groups Authenticated by the FirePass internal database.