The Most up-to-date Guide To 156-915.80 bootcamp Jun 2021

Question No: 2

Which file gives you a list of all security servers in use, including port number?

A. $FWDIR/conf/conf.conf

B. $FWDIR/conf/servers.conf

C. $FWDIR/conf/fwauthd.conf

D. $FWDIR/conf/serversd.conf

Question No: 3

How can you check whether IP forwarding is enabled on an IP Security Appliance?

A. clish -c show routing active enable

B. cat /proc/sys/net/ipv4/ip_forward

C. echo 1 > /proc/sys/net/ipv4/ip_forward

D. ipsofwd list

Question No: 4

Type the full cphaprob command and syntax that will show full synchronization status.

Question No: 5

You want to store the GAiA configuration in a file for later reference. What command should you use?

A. write mem <filename>

B. show config u2013f <filename>

C. save config u2013o <filename>

D. save configuration <filename>

Question No: 6

What scenario indicates that SecureXL is enabled?

A. Dynamic objects are available in the Object Explorer

B. SecureXL can be disabled in cpconfig

C. fwaccel commands can be used in clish

D. Only one packet in a stream is seen in a fw monitor packet capture

Question No: 7

The Firewall kernel is replicated multiple times, therefore:

A. The Firewall kernel only touches the packet if the connection is accelerated

B. The Firewall can run different policies per core

C. The Firewall kernel is replicated only with new connections and deletes itself once the connection times out

D. The Firewall can run the same policy on all cores

Question No: 8

An internal host initiates a session to the Google.com website and is set for Hide NAT behind the Security Gateway. The initiating traffic is an example of .

A. client side NAT

B. source NAT

C. destination NAT

D. None of these

Question No: 9

The Identity Agent is a lightweight endpoint agent that authenticates securely with Single Sign-On (SSO). What is not a recommended usage of this method?

A. When accuracy in detecting identity is crucial

B. Leveraging identity for Data Center protection

C. Protecting highly sensitive servers

D. Identity based enforcement for non-AD users (non-Windows and guest users)

Question No: 10

Assume you are a Security Administrator for ABCTech. You have allowed authenticated access to users from Mkting_net to Finance_net. But in the useru2021s properties, connections are only permitted within Mkting_net. What is the BEST way to resolve this conflict?

A. Select Ignore Database in the Action Properties window.

B. Permit access to Finance_net.

C. Select Intersect with user database in the Action Properties window.

D. Select Intersect with user database or Ignore Database in the Action Properties window.

Question No: 11

You are running a R80 Security Gateway on GAiA. In case of a hardware failure, you have a server with the exact same hardware and firewall version installed. What back up method could be used to quickly put the secondary firewall into production?

A. manual backup

B. upgrade_export

C. backup

D. snapshot