Question 1

Which of the following technologies extracts detailed information from packets and stores that information in state tables?

Options :

A : INSPECT Engine

B : Next-Generation Firewall

C : Packet Filtering

D : Application Layer Firewall

Answer: B

Question 2

Which of the following is an authentication method used for Identity Awareness?

Options :

A : SSL

B : Captive Portal

C : PKI

D : RSA

Answer: B

Question 3

How do logs change when the "Accounting" tracking option is enabled on a traffic rule?

Options :

A :

Involved traffic logs are updated every 10 minutes to show how much data has passed on the connection.

B : Involved traffic logs will be forwarded to a log server.

C : Provides additional information to the connected user.

D : Provides log details view email to the Administrator.

Answer: A

Question 4

What needs to be configured if the NAT property 'Translate destination on client side' is not enabled in Global properties?

Options :

A : A host route to route to the destination IP

B : Use the file local.arp to add the ARP entries for NAT to work

C : Nothing, the Gateway takes care of all details necessary

D : Enabling 'Allow bi-directional NAT' for NAT to work correctly

Answer: C

Question 5

Which statement describes what Identity Sharing is in Identity Awareness?

Options :

A : Management servers can acquire and share identities with Security Gateways

B : Users can share identities with other users

C : Security Gateways can acquire and share identities with other Security Gateways

D : Administrators can share identifies with other administrators

Answer: C

Free 156-215.81.20 Mock Exam – Practice Online Confidently