Question 1

What are the four ways to insert an FW Monitor into the firewall kernel chain?

Options :

A : Relative position using location, relative position using alias, absolute position, all positions

B : Absolute position using location, absolute position using alias, relative position, all positions

C : Absolute position using location, relative position using alias, general position, all positions

D : Relative position using geolocation, relative position using inertial navigation, absolute position, all positions

Answer: D

Question 2

Which kernel process is used by Content Awareness to collect the data from contexts?

Options :

A : dlpda

B : PDP

C : cpemd

D : CMI

Answer: D

Question 3

To check the current status of hyper-threading, which command would you execute in expert mode?

Options :

A : cat /proc/hypert_status

B : cat /proc/smt_status

C : cat /proc/hypert_stat

D : cat /proc/smt_stat

Answer: B

Question 4

For TCP connections, when a packet arrives at the Firewall Kernel out of sequence or fragmented, which layer of IPS corrects this to allow for proper inspection?

Options :

A : Passive Streaming Library

B : Protections

C : Protocol Parsers

D : Context Management

Answer: A

Question 5

James is using the same filter expression in fw monitor for CITRIX very often and instead of typing this all the time he wants to add it as a macro to the fw monitor definition file. What's the name and location of this file?

Options :

A : $FWDIR/lib/fwmonltor.def

B : $FWDIR/conf/fwmonltor.def

C : $FWDIR/lib/tcpip.def

D : $FWDIR/lib/fw.monitor

Answer: A

Free 156-587 Mock Exam – Practice Online Confidently

Buying Options: