156-581 試験問題を無料オンラインアクセス

Which of the following is the most significant impact of not having a valid Policy Management license installed on a management server?

• A.Inability to log in to SmartConsole
• B.Inability to review logs
• C.Inability to make rule changes
• D.Inability to install policies

Jerry is firewall administrator in BRAVO Company. He gets a call from the R&D department Manager who says that some employees from R&D could not access new development server (192.168.60.100), which is in server network behind the Data Center Firewall. Jerry looks at FW logs and found no log records for that server. What should he do next?

• A.He must check if the packets are being dropped at the firewall by using command cppcap -f "arp and host 192.168.80.10" -DNT -o /var/log/capture.pcap
• B.He must check if the packets are being dropped at the firewall by using command fw ctl zdebug + drop grep 192.168.60.100
• C.He must check if the packets are being dropped at the firewall by using command tcpdump -i interface host 192.168.60.100
• D.He must check if the packets are being dropped at the firewall by using command fw ctl zdebug + drop dst=192.168 60.100

How can a firewall admin check if the logs are coming from Security Gateway Cluster to Management Server?

• A.fw monitor -e 'accept host(p_address of GW) and dport=2571"
• B.tcpdump -ni interface_pointing_to_Gateway tcp port 257
• C.fw monitor -e 'accept host(ip_address of GW) and spon=257"
• D.tcpdump -ni interface_pointing_from_Gateway tcp port 257

Select the technology that does the following actions
- provides reassembly via streaming for TCP
- handles packet reordering and congestion
- handles payload overlap
- provides consistent stream of data to protocol parsers

• A.fwtcpstream
• B.Context Management
• C.A Passive Streaming Library
• D.Pre-Protocol Parser

Where do Protocol parsers register themselves for IPS?

• A.Protections database
• B.Context Management Infrastructure
• C.Passive Streaming Library
• D.Other handlers register to Protocol parser