Question 1

What is the name of the default Threat Prevention Profile?

Options :

A : Basic

B : Standard

C : Strict

D : Optimized

Answer: D

Question 2

You have to issue a Log filter to view IPS logs generated for user John Doe. Which of the following is the correct filter?

Options :

A : user:"John-Doe" AND (action:drop OR action:reject OR action:block)

B : user:John Doe AND (action:drop OR action:reject OR action:block)

C : user:"John Doe" AND (action:drop OR action:reject OR action:block)

D : user:'John Doe' AND (action:drop OR action:reject OR action:block)

Answer: C

Question 3

What type of layer is the threat Prevention?

Options :

A : It can be ordered or inline

B : Inline

C : Post Access Control follow-up layer

D : Ordered

Answer: D

Question 4

How can the IPS Blade be activated?

Options :

A : The IPS Blade must be activated on the Management Server object and can be used on every gateway managed by this Management server.

B : No need to activate the IPS Blade as far as you have installed the correct IPS license on the gateways.

C : In a ClusterXL deployment, the IPS Blade must be activated on the individual cluster nodes.

D : The IPS Blade must be activated on the individual Security Gateway object.

Answer: D

Question 5

What is the correct action to exclude one or more Threat Prevention Blades in a Blade exception rule?

Options :

A : "inactive"

B : "ignore"

C : "Ask user"

D : "bypass"

Answer: D

Free 156-590 Mock Exam – Practice Online Confidently