156-315.77 Online Practice Questions and Answers

What is the primary benefit of usingupgrade exportover either backup or snapshot?

A. The commands backup and snapshot can take a long time to run whereasupgrade exportwill take a much shorter amount of time.

B. upgrade exportwill back up routing tables, hosts files, and manual ARP configurations, where backup and snapshot will not.

C. upgrade exporthas an option to backup the system andSmart ViewTracker logs while backup and snapshot will not.

D. upgrade exportis operating system independent and can be used when backup or snapshot is not available.

When definingSmart Directoryfor High Availability (HA), which of the following should you do?

A. Replicate the same information on multiple Active Directory servers.

B. Configure Secure Internal Communications with each server and fetch branches from each.

C. Configure aSmart DirectoryCluster object.

D. Configure theSmart Directoryas a single object using the LDAP cluster IP. Actual HA functionality is configured on the servers.

By default, the Cluster Control Protocol (CCP) uses this to send delta sync messages to other cluster members.

A. Broadcast

B. Unicast

C. Multicast

D. Shoutcast

How do new connections get established through a Security Gateway with SecureXL enabled?

A. New connections are always inspected by the firewall and if they are accepted, the subsequent packets of the same connection will be passed through SecureXL

B. The new connection will be first inspected by SecureXL and if it does not match the drop table of SecureXL, then it will be passed to the firewall module for a rule match.

C. New connection packets never reach the SecureXL module.

D. If the connection matches a connection or drop template in SecureXL, it will either be established or dropped without performing a rule match, else it will be passed to the firewall module for a rule match.

To verify SecureXL statistics you would use the command ________?

A. fwaccel stats

B. fw ctl pstat

C. fwaccel top

D. cphaprob stat

Consider the following actions that VPN-1 NGX can take when it control packets. The Policy Package has been configured for Traditional Mode VPN. Identify the options that includes the available actions. Select four.

A. Allow

B. Reject

C. Client auth

D. Decrypt

E. Accept

F. Drop

G. Encrypt

H. Hold

I. Proxy

The following configuration is for VPN-1 NGX:1s this configuration correct for Management High Availability (HA)?

A. No, the SmartCenter Servers must be installed on the same operating system.

B. No, a VPN-1 NGX SmartCenter Server cannot run on Red Hat Linux 7.3.

C. No, the SmartCenter Servers must reside on the same network.

D. No, A VPN-1 NGX SmartCenter Server can only be in a Management HA configuration, if the operating system is Solaris.

E. No, the SmartCenter Servers do not have the same number of NICs.

A Security Administrator opens a new session, makes changes to the policy and submits the session for approval. The Security Manager may approve the session or request repair. If a manager opens a new session and submits it for approval, can he approve his session as a Security Manager?

A. It depends on theSmart Workflowsettings in Global Properties.

B. Yes, he can always approve his own session.

C. No, he can never approve his own session.

D. It depends on the type of changes made in the session.

You have pushed a policy to your firewall and you are not able to access the firewall. What command will allow you to remove the current policy from the machine?

A. fw purge active

B. fw purge policy

C. fw fetch policy

D. fw unloadlocal

Which of the following methods will provide the most complete backup of an R77 configuration?

A. Database Revision Control

B. Policy Package Management

C. The command migrate_export

D. Copying the directories $FWDIR\conf and $CPDIR\conf to another server