156-215.80 Online Practice Questions and Answers

What is the most complete definition of the difference between the Install Policy button on the SmartConsole's tab, and the Install Policy within a specific policy?

A. The Global one also saves and published the session before installation.

B. The Global one can install multiple selected policies at the same time.

C. The local one does not install the Anti-Malware policy along with the Network policy.

D. The second one pre-select the installation for only the current policy and for the applicable gateways.

What statement is true regarding Visitor Mode?

A. VPN authentication and encrypted traffic are tunneled through port TCP 443.

B. Only ESP traffic is tunneled through port TCP 443.

C. Only Main mode and Quick mode traffic are tunneled on TCP port 443.

D. All VPN traffic is tunneled through UDP port 4500.

You find that Users are not prompted for authentication when they access their Web servers, even though you have created an HTTP rule via User Authentication. Choose the BEST reason why.

A. You checked the cache password on desktop option in Global Properties.

B. Another rule that accepts HTTP without authentication exists in the Rule Base.

C. You have forgotten to place the User Authentication Rule before the Stealth Rule.

D. Users must use the SecuRemote Client, to use the User Authentication Rule.

Where do you verify that UserDirectory is enabled?

A. Verify that Security Gateway > General Properties > Authentication > Use UserDirectory (LDAP) for Security Gateways is checked

B. Verify that Global Properties > Authentication > Use UserDirectory (LDAP) for Security Gateways is checked.

C. Verify that Security Gateway > General Properties > UserDirectory (LDAP) > Use UserDirectory (LDAP) for Security Gateways is checked.

D. Verify that Global Properties > UserDirectory (LDAP) > Use UserDirectory (LDAP) for Security Gateways is checked.

What is the Manual Client Authentication TELNET port?

A. 23

B. 264

C. 900

D. 259

Which NAT rules are prioritized first?

A. Post-Automatic/Manual NAT rules

B. Manual/Pre-Automatic NAT

C. Automatic Hide NAT

D. Automatic Static NAT

If the Active Security Management Server fails or if it becomes necessary to change the Active to Standby, the following steps must be taken to prevent data loss. Providing the Active Security Management Server is responsible, which of these steps should NOT be performed:

A. Rename the hostname of the Standby member to match exactly the hostname of the Active member.

B. Change the Standby Security Management Server to Active.

C. Change the Active Security Management Server to Standby.

D. Manually synchronize the Active and Standby Security Management Servers.

What is the default shell of Gaia CLI?

A. Monitor

B. CLI.sh

C. Read-only

D. Bash

In which VPN community is a satellite VPN gateway not allowed to create a VPN tunnel with another satellite VPN gateway?

A. Pentagon

B. Combined

C. Meshed

D. Star

Fill in the blank: ____________ is the Gaia command that turns the server off.

A. sysdown

B. exit

C. halt

D. shut-down