Online Access Free 156-215-71 Practice Test

How can you recreate the account of the Security Administrator, which was created during initial installation of the Management Server on SecurePlatform?

• A.Type cpm -a, and provide the existing Administrator's account name. Reset the Security Administrator's password.
• B.Export the user database into an ASCII file with fwm dbexport. Open this file with an editor, and delete the Administrator Account portion of the file. You will be prompted to create a new account.
• C.Launch SmartDashboard in the User Management screen, and delete the cpconfig administrator.
• D.Launch cpconfig and delete the Administrator's account. Recreate the account with the same name.

Which of the following actions take place in IKE Phase 2 with Perfect Forward Secrecy disabled?

• A.Each Security Gateway generates a private Diffie-Hellman (DH) key from random pools.
• B.Symmetric IPsec keys are generated.
• C.Peers authenticate using certificates or preshared secrets.
• D.The DH public keys are exchanged.

Why are certificates preferred over pre-shared keys in an IPsec VPN?

• A.Weak Security: PSK are static and can be brute-forced.
• B.Weak security: PSKs can only have 112 bit length.
• C.Weak performance: PSK takes more time to encrypt than Drffie-Hellman
• D.Weak scalability: PSKs need to be set on each and every Gateway

An Administrator without access to SmartDashboard installed a new IPSO-based R71 Security Gateway over the weekend. He e-mailed you the SIC activation key. You want to confirm communication between the Security Gateway and the Management Server by installing the Policy. What might prevent you from installing the Policy?

• A.You first need to run the fw unloadlocal command on the R71 Security Gateway appliance in order to remove the restrictive default policy.
• B.An intermediate local Security Gateway does not allow a policy install through it to the remote new Security Gateway appliance Resolve by running the tw unloadlocal command on the local Security Gateway.
• C.You first need to create a new Gateway object in SmartDashboard, establish SIC via the Communication button, and define the Gateway's topology.
• D.You have not established Secure Internal Communications (SIC) between the Security Gateway and Management Server You must initialize SIC on the Security Management Server.

UDP packets are delivered if they are _________.

• A.Reference in the SAM related Dynamic tables
• B.Bypassing the Kernel by the "forwarding layer" of clusterXL
• C.A legal response to an allowed request on the inverse UDP ports and IP
• D.A Stateful ACK to a valid SYN-SYN-/ACK on the inverse UDP ports and IP