NEW QUESTION 1

If Jack was concerned about the number of log entries he would receive in the SmartReporter system, which policy would he need to modify?

• A. Log Sequence Policy
• B. Report Policy
• C. Log Consolidator Policy
• D. Consolidation Policy

Answer: D

NEW QUESTION 2
Update the topology in the cluster object for the cluster and both members.

• A. Yes
• B. Not Mastered

Answer: A

NEW QUESTION 3

You need to back up the routing, interface, and DNS configuration information from your R77 GAiA Security Gateway. Which backup-and-restore solution do you use?

• A. Manual copies of the directory $FWDIR/conf
• B. GAiA back up utilities
• C. upgrade_export and upgrade_import commands
• D. Database Revision Control

Answer: B

NEW QUESTION 4

Charles requests a Website while using a computer not in the net_singapore network.

What is TRUE about his location restriction?

• A. Source setting in Source column always takes precedence.
• B. Source setting in User Properties always takes precedence.
• C. As location restrictions add up, he would be allowed from net_singapore and net_sydney.
• D. It depends on how the User Auth object is configured; whether User Properties or Source Restriction takes precedence.

Answer: D

NEW QUESTION 5
Install the Security Policy.

• A. Yes
• B. Not Mastered

Answer: A

NEW QUESTION 6

You just installed a new Web server in the DMZ that must be reachable from the Internet. You create a manual Static NAT rule as follows:
Source: Any || Destination: web_public_IP || Service: Any || Translated Source: original ||
Translated Destination: web_private_IP || Service: Original
“web_public_IP” is the node object that represents the new Web server’s public IP address. “web_private_IP” is the node object that represents the new Web site’s private IP address. You enable all settings from Global Properties > NAT.
When you try to browse the Web server from the Internet you see the error “page cannot be displayed”. Which of the following is NOT a possible reason?

• A. There is no Security Policy defined that allows HTTP traffic to the protected Web server.
• B. There is no ARP table entry for the protected Web server’s public IP address.
• C. There is no route defined on the Security Gateway for the public IP address to the Web server’s private IP address.
• D. There is no NAT rule translating the source IP address of packets coming from the protected Web server.

Answer: D

NEW QUESTION 7

Where does the security administrator activate Identity Awareness within SmartDashboard?

• A. Gateway Object > General Properties
• B. Security Management Server > Identity Awareness
• C. Policy > Global Properties > Identity Awareness
• D. LDAP Server Object > General Properties

Answer: A

NEW QUESTION 8
CORRECT TEXT
MultiCorp is located in Atlanta. It has a branch office in Europe, Asia, and Africa. Each location has its own AD controller for local user login. How many ADqueries have to be configured?

• A. Yes
• B. Not Mastered

Answer: A

NEW QUESTION 9

Which statements about Management HA are correct?
1) Primary SmartCenter describes first installed SmartCenter
2) Active SmartCenter is always used to administrate with SmartConsole
3) Active SmartCenter describes first installed SmartCenter
4) Primary SmartCenter is always used to administrate with SmartConsole

• A. 1 and 4
• B. 2 and 3
• C. 1 and 2
• D. 3 and 4

Answer: C

NEW QUESTION 10

After implementing Static Address Translation to allow Internet traffic to an internal Web Server on your DMZ, you notice that any NATed connections to that machine are being dropped by anti-spoofing protections. Which of the following is the MOST LIKELY cause?

• A. The Global Properties setting Translate destination on client side is unchecke
• B. But the topology on the DMZ interface is set to Internal - Network defined by IP and Mas
• C. Check the Global Properties setting Translate destination on client side.
• D. The Global Properties setting Translate destination on client side is unchecke
• E. But the topology on the external interface is set to Others +. Change topology to External.
• F. The Global Properties setting Translate destination on client side is checke
• G. But the topology on the external interface is set to Externa
• H. Change topology to Others +.
• I. The Global Properties setting Translate destination on client side is checke
• J. But the topology on the DMZ interface is set to Internal - Network defined by IP and Mas
• K. Uncheck the Global Properties setting Translate destination on client side.

Answer: A

NEW QUESTION 11

When using AD Query to authenticate users for Identity Awareness, identity data is received seamlessly from the Microsoft Active Directory (AD). What is NOT a recommended usage of this method?

• A. Leveraging identity in the application control blade
• B. Basic identity enforcement in the internal network
• C. Identity-based auditing and logging
• D. Identity-based enforcement for non-AD users (non-Windows and guest users)

Answer: D

NEW QUESTION 12

When restoring R77 using the command upgrade_import, which of the following items are NOT restored?

• A. SIC Certificates
• B. Licenses
• C. Route tables
• D. Global properties

Answer: C

NEW QUESTION 13

Which of the following options is available with the GAiA cpconfig utility on a Management Server?

• A. Export setup
• B. DHCP Server configuration
• C. GUI Clients
• D. Time & Date

Answer: C

NEW QUESTION 14

Peter is your new Security Administrator. On his first working day, he is very nervous and enters the wrong password three times. His account is locked. What can be done to unlock Peter’s account? Give the BEST answer.

• A. You can unlock Peter’s account by using the command fwm lock_admin -u Peter on the Security Management Server.
• B. You can unlock Peter’s account by using the command fwm unlock_admin -u Peter on the Security Management Server
• C. It is not possible to unlock Peter’s accoun
• D. You have to install the firewall once again or abstain from Peter’s help.
• E. You can unlock Peter’s account by using the command fwm unlock_admin -u Peter on the Security Gateway.

Answer: A

NEW QUESTION 15

A host on the Internet initiates traffic to the Static NAT IP of your Web server behind the Security Gateway. With the default settings in place for NAT, the initiating packet will translate the .

• A. destination on server side
• B. source on server side
• C. source on client side
• D. destination on client side

Answer: D

NEW QUESTION 16
......