Q5. You want to generate a cpinfo file via CLI on a system running GAiA. This will take about 40 minutes since the log files are also needed. What action do you need to take regarding timeout?

A. No action is needed because cpshell has a timeout of one hour by default.

B. Log in as the default user expert and start cpinfo.

C. Log in as admin, switch to expert mode, set the timeout to one hour with the command, idle 60, then start cpinfo.

D. Log in as Administrator, set the timeout to one hour with the command idle 60 and start cpinfo.

View Answer

Q6. Using mgmt_cli, what is the correct syntax to import a host object called Server_1 from the CLI?

A. mgmt_cli add-host u201cServer_1u201d ip_ address u201c10.15.123.10u201d u2013 format txt

B. mgmt_ cli add host name u201cServer_ 1u201d ip-address u201c10.15.123.10u201d u2013 format json

C. mgmt_ cli add object-host u201cServer_ 1u201d ip-address u201c10.15.123.10u201d u2013 format json

D. mgmt_cli add object u201cServer_ 1u201d ip-address u201c10.15.123.10u201d u2013 format json

View Answer

Q7. How could you compare the Fingerprint shown to the Fingerprint on the server? Exhibit:

A. Run cpconfig, select the Certificate's Fingerprint option and view the fingerprint

B. Run cpconfig, select the GUI Clients option and view the fingerprint

C. Run cpconfig, select the Certificate Authority option and view the fingerprint

D. Run sysconfig, select the Server Fingerprint option and view the fingerprint

View Answer

Q8. Which CLI tool helps on verifying proper ClusterXL sync?

A. fw stat

B. fw ctl sync

C. fw ctl pstat

D. cphaprob stat

View Answer

Q9. You have three Gateways in a mesh community. Each gatewayu2021s VPN Domain is their internal network as defined on the Topology tab setting All IP Addresses behind Gateway based on Topology information.

You want to test the route-based VPN, so you created VTIs among the Gateways and created static route entries for the VTIs. However, when you test the VPN, you find out the VPN still go through the regular domain IPsec tunnels instead of the routed VTI tunnels.

What is the problem and how do you make the VPN use the VTI tunnels?

A. Domain VPN takes precedence over the route-based VTI. To make the VPN go through VTI, remove the Gateways out of the mesh community and replace with a star community

B. Domain VPN takes precedence over the route-based VTI. To make the VPN go through VTI, use an empty group object as each Gatewayu2021s VPN Domain

C. Route-based VTI takes precedence over the Domain VPN. To make the VPN go through VTI, use dynamic-routing protocol like OSPF or BGP to route the VTI address to the peer instead of static routes

D. Route-based VTI takes precedence over the Domain VPN. Troubleshoot the static route entries to insure that they are correctly pointing to the VTI gateway IP.

View Answer

Q10. What command would show the API server status?

A. cpm status

B. api restart

C. api status

D. show api status

View Answer

Q11. Type the full fw command and syntax that will show full synchronization status.

View Answer

Q12. When using GAiA, it might be necessary to temporarily change the MAC address of the interface eth 0 to 00:0C:29:12:34:56. After restarting the network the old MAC address should be active. How do you configure this change?

A. Option A

B. Option B

C. Option C

D. Option D

View Answer

Q13. How many pre-defined exclusions are included by default in SmartEvent R80 as part of the product installation?

A. 5

B. 0

C. 10

D. 3

View Answer

Q14. To bind a NIC to a single processor when using CoreXL on GAiA, you would use the command sim Answer:

affinity

View Answer