Network-Security-Essentials 試験問題を無料オンラインアクセス

You configured a Firebox for a school environment. Students must have more restricted access than teachers, and unauthenticated users cannot have any Internet access. You added Student and Teacher groups to your proxy policies that handle web traffic. Based on the image below, this configuration can accomplish your goals.

• A.True
• B.False

There is an Internet outage at your primary ISP, but the Internet connection from the Firebox has not failed over to your backup ISP. Both ISP connectors are correctly cabled and have active physical links. What could cause this problem? (Select two.)

• A.Link Monitor target for the backup ISP interface is not responding
• B.In the Multi-WAN settings, the Gradual Fallback option is enabled
• C.In the Multi-WAN settings, the Immediate Fallback option is enabled
• D.The Link Monitor target for the primary ISP interface is set to ping the default gateway, but the outage is further upstream
• E.The secondary IP addresses are not defined for the backup ISP interface

In a Mobile VPN configuration, why would you choose default-route (full tunnel) VPN instead of split tunnel VPN? (Select one.)

• A.Default-route VPN uses less bandwidth.
• B.Default-route VPN automatically allows dynamic NAT.
• C.Default-route VPN is the only option you can use to apply security services to connections routed to your internal servers.
• D.Default-route VPN uses less processing power.
• E.Default-route VPN enables your Firebox to examine all remote user traffic.

Which of these is a network IP address? (Select one.)

• A.10 0.1 255 8
• B.1G2 153 10 O 1
• C.10 10 10 255/24
• D.172 16 100 1/12
• E.1Q2 158.10 0-24

You have just configured Mobile VPN with IKEv2 for your customer. By default, authenticated Mobile VPN users are allowed to send traffic to all Firebox networks through the VPN.

• A.True
• B.False