156-215.71 試験問題を無料オンラインアクセス

What is the command used to view which policy is installed?

• A.fw ctl install
• B.fwm stat
• C.fw stat
• D.fw ctl pstat

You have configured Automatic Static NAT on an internal host-node object. You clear the box Translate destination on client site from Global Properties / NAT. Assuming all other NAT settings in Global Properties are selected, what else must be configured so that a host on the Internet can initiate an inbound connection to this host?

• A.A static route, to ensure packets destined for the public NAT IP address will reach the Gateway's internal interface.
• B.The NAT IP address must be added to the anti-spoofing group of the external gateway interface
• C.No extra configuration is needed
• D.A proxy ARP entry, to ensure packets destined for the public IP address will reach the Security Gateway's external interface.

You wish to configure a VPN and you want to encrypt not just the data packet, but the original header. Which encryption scheme would you select?

• A.In-place encryption
• B.Both encrypt the data and header
• C.Tunneling-mode encryption

When using vpn tu, which option must you choose if you want to rebuild your VPN for a specific IP (gateway)?

• A.(5) Delete all IPsec SAs for a given peer (GW)
• B.(7) Delete all IPsec+IKE SAs for a given peer (GW)
• C.(6) Delete all IPsec SAs for a given User (Client)
• D.(8) Delete all IPsec+IKE SAs for a given User (Client)

How many inspection capture points are shown in fw monitor?

• A.2
• B.4
• C.1
• D.Depends on the number of interfaces on the Gateway