156-915.80 試験問題を無料オンラインアクセス

You have existing dbedit scripts from R77. Can you use them with R80.10?

• A.dbedit is fully supported in R80.10
• B.dbedit is not supported in R80.10
• C.You can use dbedit to modify threat prevention or access policies, but not create or modify layers
• D.dbedit scripts are being replaced by mgmt._cli in R80.10
  dbedit (or GuiDbEdit) uses the cpmi protocol which is gradually being replaced by the new R80.10 automation architecture. cpmi clients are still supported in R80.10, but there are some functionalities that cannot be managed by cpmi anymore. For example, the Access and Threat policies do not have a cpmi representation. They can be managed only by the new mgmt_cli and not by cpmi clients. There are still many tables that have an inner cpmi representation (for example, network objects, services, servers, and global properties) and can still be managed using cpmi.

For best practices, what is the recommended time for automatic unlocking of locked admin accounts?

• A.20 minutes
• B.30 minutes at least
• C.Admin account cannot be unlocked automatically
• D.15 minutes

The Firewall Administrator is required to create 100 new host objects with different IP addresses. What API command can he use in the script to achieve the requirement?

• A.add host name <New HostName> ip-address <ip address>
• B.set host name <New HostName> ip-address <ip address>
• C.add hostname <New HostName> ip-address <ip address>
• D.set hostname <New HostName> ip-address <ip address>

In R80 spoofing is defined as a method of:

• A.Disguising an illegal IP address behind an authorized IP address through Port Address Translation.
• B.Making packets appear as if they come from an authorized IP address.
  IP spoofing replaces the untrusted source IP address with a fake, trusted one, to hijack connections to your network. Attackers use IP spoofing to send malware and bots to your protected network, to execute DoS attacks, or to gain unauthorized access.
• C.Detecting people using false or wrong authentication logins
• D.Hiding your firewall from unauthorized users.

Your company's Security Policy forces users to authenticate to the Gateway explicitly, before they can use any services. The Gateway does not allow the Telnet service to itself from any location. How would you configure authentication on the Gateway? With a:

• A.Client Authentication for fully automatic sign on
• B.Session Authentication rule
• C.Client Authentication rule, using partially automatic sign on
• D.Client Authentication rule using the manual sign-on method, using HTTP on port 900