Online Access Free 156-210 Practice Test

Consider the following network:
No
Original Packet
Translated Packet
Source
Destination
Service
Source
Destination
Service
The administrator wants to take all the local and DMZ hosts behind the gateway except the HTTP server 192.9.200.9. The http server will be providing public services and must be accessible from Internet. Select the best NAT solution below that meets these requirements.

• A.Use automatic NAT that creates a static NAT to the HTTP server.
• B.Both A and D.
• C.To hide the private address set the address translation for 192.9.200.0.
• D.To hide the private addresses set the address translation for Private Net.
• E.Use automatic NAT rule creation to hide NAT Local net and private Net.

When you make a rule, the rule is not enforces as part of your Security Policy.

• A.True
• B.False

Which command utility allows verification of the Security Policy installed on a firewall module?

• A.Fw stat.
• B.Fw ct1 pstat.
• C.Fw pol.
• D.Fw ver.
• E.Fw printlic.

Which type of authentication will require users to TELNET to port 259 or connect via HTTP at port 900 to be authenticated for a service?

• A.IP authentication
• B.Session authentication
• C.User authentication
• D.Client authentication
• E.None

With Blocking Scope default settings, a selected connection is terminated:

• A.But all further attempts to establish connections from this specific source IP address will be authenticated before being denied.
• B.Both A and D.
• C.And all further attempts to establish a connection from the same source IP address to the firewall's IP address will be blocked.
• D.And all further attempts to establish connections to this specific destination IP address will be denied.
• E.And all further attempts to establish a connection from the same source IP address to the same destination IP address and port will be blocked.