156-115.80 試験問題を無料オンラインアクセス

A Firewall administrator is attempting to push a policy to a new Security Gateway for a remote office but the installation fails. The Management Server IP is 10.1.1.101. Initial troubleshooting shows that policy is successfully transferred to the Gateway. What command would you use to attempt to identify the cause of the issue?

• A.fw ctl debug -m 10.1.1.101
• B.fw fetchlocal -d $FWDIR/state/_tmp/FW1
• C.cp_merge export_policy -s 10.1.1.101 -n Standard $var/log/
• D.fw ctl debug -T -f > /var/log/p_debug.txt

Which templates for SecureXL are not enabled by default?

• A.Drop and NAT
• B.All templates are enabled by default
• C.Accept and NMR
• D.All templates are disabled by default

What does the command "vpn shell tunnels delete all ike" do?

• A.Deletes all IKE and IPSEC SA's
• B.Delete only outbound_SPI tables
• C.Deletes all IKE SA's
• D.Deletes all IKE configuration on the Gateway

Which of the following is correct in a Threat Prevention policy?

• A.Threat Prevention is applied based on the profile. Protection Scope does not have any relevance
• B.Threat Prevention inspects traffic to all objects specified in the Protected Scope
• C.Threat Prevention inspects traffic to and/or from all objects specified in the Protected Scope
• D.Threat Prevention inspects traffic from all objects specified in the protected Scope

Which command would show the synchronization statistics between cluster members?

• A.cphaprob stat
• B.cphaprob sync
• C.fw ctl pstat
• D.fw ctl sync