Question 1

An administrator needs to allow users to use only certain email applications.How should the administrator configure the firewall to restrict users to specific email applications?

Options :

A : Create an application filter and filter it on the collaboration category, email subcategory.

B : Create an application group and add the email applications to it.

C : Create an application filter and filter it on the collaboration category.

D : Create an application group and add the email category to it.

Answer: B

Question 2

Based on the screenshot what is the purpose of the included groups?

Options :

A : They are only groups visible based on the firewall's credentials.

B : They are used to map usernames to group names.

C : They contain only the users you allow to manage the firewall.

D : They are groups that are imported from RADIUS authentication servers.

Answer: B

Question 3

To use Active Directory to authenticate administrators, which server profile is required in the authentication profile?

Options :

A : domain controller

B : TACACS+

C : LDAP

D : RADIUS

Answer: C

Question 4

Which type of address object is "10 5 1 1/0 127 248 2"?

Options :

A : IP subnet

B : IP wildcard mask

C : IP netmask

D : IP range

Answer: B

Question 5

An NGFW engineer is establishing bidirectional connectivity between the accounting virtual system(VSYS) and the marketing VSYS. The traffic needs to transition between zones without leaving thefirewall (no external physical connections). The interfaces for each VSYS are assigned to separatevirtual routers (VRs), and inter-VR static routes have been configured. An external zone has beencreated correctly for each VSYS. Security policies have been added to permit the desired trafficbetween each zone and its respective external zone. However, the desired traffic is still unable tosuccessfully pass from one VSYS to the other in either direction.Which additional configuration task is required to resolve this issue?

Options :

A : Create a transit VSYS and route all inter-VSYS traffic through it.

B : Add each VSYS to the list of visible virtual systems of the other VSYS.

C : Enable the œallow inter-VSYS traffic option in both external zone configurations.

D : Create Security policies to allow the traffic between the two external zones.

Answer: B

Free NetSec-Analyst Mock Exam – Practice Online Confidently

Buying Options: