156-215-71 試験問題を無料オンラインアクセス

What must a Security Administrator do to comply with a management requirement to log all traffic accepted through the perimeter Security gateway?

• A.In Global Properties / Reporting Tools check the box Enable tracking all rules (including rules marked as None in the Track column). Send these logs to a secondary log server for a complete logging history. Use your normal log server for standard logging for troubleshooting.
• B.Install the View Implicit Rules package using SmartUpdate.
• C.Define two log servers on the R71 Gateway object. Enable Log Implied Rules on the first log server. Enable log rule Base on the second log server. Use Smart Reporter to merge the two log server records into the same database for HIPPA log audits.
• D.Check the Log Implied Rules Globally box on the R71 Gateway object.

There are three options available for configuring a firewall policy on the SecureClient Mobile device. Which of the following is NOT an option?

• A.yes
• B.Configured on server
• C.No
• D.Configured on endpoint client

When you add a resource object to a rule, which of the following occurs?

• A.All packets matching the resource service are analyzed through an application-layer proxy.
• B.All packets that match the resource will be dropped.
• C.Users attempting to connect to the destination of the rule will be required to authenticate.
• D.All packets matching that rule are either encrypted or decrypted by the defined resource.

After implementing Static Address Translation to allow Internet traffic to an internal Web Server on your DMZ, you notice that any NATed connections to that machine are being dropped by anti-spoofing protections. Which of the following is the MOST LIKELY cause?

• A.The Global Properties setting Translate destination on client side is checked But the topology on the DMZ interface is set to Internal -Network defined by IP and Mask Uncheck the Global Properties setting Translate destination on client side
• B.The Global Properties setting Translate destination on client side is unchecked. But the topology on the external interface is set to Others +. Change topology to External
• C.The Global Properties setting Translate destination on client side is checked. But the topology on the external interface is set to External.Change topology to Others +.
• D.The Global Properties setting Translate destination on client side is unchecked. But the topology on the DMZ interface is set to Internal - Network defined by IP and Mask. Check the Global Properties setting Translate destination on client side.

Your boss wants you to closely monitor an employee suspected of transferring company secrets to the competition. The IT department discovered the suspect installed a WinSCP client in order to use encrypted communication. Which of the following methods is best to accomplish this task?

• A.Watch his IP in SmartView monitor by setting an alert action to any packet that matches your Rule base and his IP Address for inbound and outbound traffic.
• B.Use SmartView Tracker to follow his actions by filtering log entries that feature the WinSCP source or destination port. Then, export the corresponding entries to a separate log file for documentation.
• C.Use SmartDashboard to add a rule in the firewall rule Base that matches his IP address and those of potential target and suspucious9 protocols. Apply the alert action or customized messaging.
• D.Send the suspect an email with a key logging Trojan attached, to get direct information about his wrong doing