Online Access Free 156-115.80 Practice Test

What is the difference between Client-Side and Server-Side NAT?

• A.The translation occurs at the kernel nearest the server in both cases. So, there is no difference at all
• B.The translation occurs at the kernel nearest the server for client-side NAT, but for server-side NAT, the translation occurs at the kernel nearest the client
• C.The translation occurs at the kernel nearest the client in both cases. So, there is no difference at all
• D.The translation occurs at the kernel nearest the client for client-side NAT, but for server-side NAT, the translation occurs at the kernel nearest the server

Joey's implementing a new R80.10 firewall cluster into the network. During the implementation he notices that the cluster object is in error state in SmartConsole. He tries to figure out the cause of the problem and runs a ClusterXL kernel debug with command: 'fw ctl debug -m cluster + stat pnote conf ccp' ClusterXL kernel debug shows him following info: fwha_set_new_local_state: Old version HA machines exist around so prevent state change to READY.
How can he solve the problem?

• A.Connect with GuiDBedit Tool to Security Management Server. Go to Table - Network Objects - network_objects. Select the relevant R80.10 Cluster object. Go to Search menu - Find - paste mac_magic. Right-click on the mac_magic the object - select Edit... and change the value to 254. Save changes and install policy.
• B.cphaconf cluster_id set <NEW_CLUSTER_ID_VALUE>
• C.Connect with GuiDBedit Tool to Security Management Server. Go to Table - Network Objects - network_objects. Select the relevant R80.10 Cluster object. Go to Search menu - Find - paste cluster_magic. Right-click on the cluster_magic the object - select Edit... and change the value between
  1 and 253. Save changes and install policy.
• D.cphaprob mmagic

Which of the following is NOT a valid "fwaccel" parameter?

• A.templates
• B.stat
• C.stats
• D.packets

You have configured IPS Bypass Under Load function with additional kernel parameters:
ids_tolerance_no_stress=15 and ids_tolerance_stress=15. For configuration you used the "fw ctl set" command. After reboot you noticed that these parameters returned to their default values. What do you need to do to make this configuration work immediately and stay permanent?

• A.Set these parameters again with "fw ctl set" and save configuration with "save config"
• B.Set these parameters again with "fw ctl set" and edit appropriate parameters in $FWDIR/boot/modules/ fwkern.conf
• C.Use script $FWDIR/bin IpsSetBypass.sh to set these parameters
• D.Edit appropriate parameters in $FWDIR/boot/modules/fwkern.conf

What is the correct syntax for firewall monitor to output to standard out?

• A.fw monitor > std_out
• B.fw monitor
• C.fw monitor -out
• D.fw mon