156-115.77 試験問題を無料オンラインアクセス

Tom is troubleshooting NAT issues using fw monitor and Wireshark. He tries to initiate a connection from the external network to a DMZ server using the public IP which the firewall translates to the actual IP of the server. He analyzes the captured packets using Wireshark and observes that the destination IP is being changed as required by the firewall but does not see the packet leave the external interface. What could be the reason?

• A.After the translation, the packet is dropped by the Anti-Spoofing Protection.
• B.The translation might be happening on the client side and the packet is being routed by the OS back to the external interface.
• C.Packet is dropped by the firewall.
• D.The translation might be happening on the server side and the packet is being routed by OS back to the external interface.

Which of the following items is NOT part of the columns of the chain modules?

• A.Chain position
• B.Inbound/Outbound chain
• C.Function Pointer
• D.Module location

When performing a Clean IPS procedure to resolve a corrupt IPS files issue, what file is modified in order for the SDUU process to automatically update the IPS files after completing the procedure?

• A.profiles.C
• B.objects_5_0.C
• C.inspect.C
• D.asm.C

Your cluster member is showing a state of "Ready". Which of the following is NOT a reason one would expect for this behaviour?

• A.The firewall that is showing "Ready" has been upgraded but the other firewall has not yet been upgraded
• B.One cluster member is configured for 32 bit and the other is configured for 64 bit
• C.CoreXL is configured differently on the two machines
• D.Firewall policy has not yet been installed to the firewall

When running a SecureXL debug how do you initialize the debug buffer to 32000?

• A.fw ctl debug -buf 32000
• B.fwaccel debug -buf 32000
• C.fwaccel dbg -buf 32000
• D.sim debug -buf 32000